AlohaCare

AlohaCare experienced an external system breach on May 31, 2023, which was discovered on October 17, 2023. The incident compromised names and Social Security numbers. In response, AlohaCare offered 12 months of identity theft protection services to the 21 affected Maine residents.

AlohaCare notified Vermont consumers of a data breach involving unauthorized access to member information. Compromised data included names, Social Security numbers, and financial account numbers. The company offered free credit monitoring services via Identity Force. The incident is contained.

AlohaCare notified Hawaii residents of a data security incident involving the MOVEit file transfer tool. The incident, stemming from a zero-day vulnerability, potentially exposed names, addresses, dates of birth, and Social Security numbers. AlohaCare engaged cybersecurity experts, concluded its investigation in October 2023, and is offering 12 months of free credit monitoring.

AlohaCare issued a consumer notification letter dated August 18, 2025, regarding a cybersecurity incident. The letter offers free credit monitoring services provided by Cyberscout through Identity Force (a TransUnion company) to affected individuals. The notification advises recipients to review account statements, place fraud alerts, and consider security freezes. The letter includes standard language regarding federal civil rights compliance and language access services.

AlohaCare reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-03. 45 Massachusetts residents were affected. The report records the breach type as electronic.

AlohaCare, a Hawaii-based health insurance provider, notified the New Hampshire Attorney General on November 3, 2023, of a data security incident involving the MOVEit file transfer tool vulnerability. The incident, discovered on or around May 31, 2023, impacted 12 New Hampshire residents. The breach exposed personal and protected health information. AlohaCare engaged third-party experts, notified credit bureaus, and offered complimentary credit monitoring and identity theft recovery services to affected individuals.

AlohaCare notified the California Attorney General of a data breach involving a zero-day vulnerability in the MOVEit file transfer tool. On May 31, 2023, the company learned it was part of the incident. The investigation concluded on October 17, 2023. Affected data may include names, addresses, dates of birth, and Social Security numbers. AlohaCare engaged cybersecurity experts and offered 12 months of free credit monitoring.