HUMANA INC.

Humana Inc. notified South Carolina residents of a privacy incident involving a subcontractor employee (Visionary, working for Cotiviti) who inappropriately used authorized access to disclose member medical records to unauthorized individuals for a personal coding business. The incident occurred between October 12, 2020, and December 16, 2020. Affected data included SSNs, names, DOBs, addresses, and PHI. Humana disabled access, launched an investigation, hired cybersecurity firms, and provided two years of free credit monitoring via Equifax.

Humana, a health sector entity reported a theft or mistake incident to the Washington Attorney General. The organization became aware of the incident on 2020-12-22 and filed notice on 2021-02-23. 675 Washington residents were affected. 63 days elapsed between awareness and notification. 71 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 675

Humana reported a data breach to the Montana Attorney General. The breach was reported on 2021-02-25. The breach occurred from 10/12/2020 to 12/16/2020. 310 Montana residents were affected.

Affected (this filing): 310

Humana Inc reported a privacy incident involving unauthorized access to member medical records by a subcontractor employee. The breach occurred between October 12, 2020, and December 16, 2020. The employee disclosed information, including names and dates of birth, to unauthorized individuals via a personal Google Drive account for personal coding training purposes. Humana engaged cybersecurity firms, disabled access, and provided two years of free credit monitoring to affected individuals.