UnitedHealth Group health plan single affiliated covered entity experienced unauthorized internal access to a database between June 28 and December 12, 2011. Discovered on January 30, 2012, the incident exposed member PII (name, SSN, DOB, address, Medicare ID). The company investigated, reported to law enforcement, and offered one year of Equifax credit monitoring. Remediation included reinforcing employee policies and evaluating additional safeguards.