Almeida Law Group is investigating a data breach at Clover Health. If you were affected, contact Almeida Law Group.
About Clover Health
Clover Health Investments, Corp. (Nasdaq: CLOV) is a publicly traded Medicare Advantage insurer and healthcare technology company founded in 2014 and headquartered in Franklin, Tennessee, with health plan operations in Eagan, Minnesota. The company provides PPO and HMO Medicare Advantage plans across multiple states, offering benefits such as dental, vision, hearing, prescription drug coverage, and telehealth. It also operates the Clover Assistant, a proprietary software platform designed to support clinical decision-making for physicians. As of mid-2026, Clover served approximately 156,000 members across five states.
What Happened?
Clover Health was listed in an HHS Office for Civil Rights breach portal report filed on September 14th, 2026, identifying the incident as a hacking/IT incident affecting 138,677 individuals. Breached information was located on a network server and other systems, and no business associate was involved.
According to Clover’s official breach notification and subsequent SEC disclosure, a threat actor gained unauthorized access to three non-managerial employee accounts through social engineering on July 3rd and 4th, 2026. The compromised employees worked in member visit-scheduling and broker-facing sales functions. Clover detected the anomalous login activity on July 4th, 2026, terminated the unauthorized access within hours, and notified law enforcement. The company disclosed the incident to the SEC via Form 8-K on July 17th, 2026. No ransomware group involvement has been reported; the attack vector was social engineering of employee accounts.
The data exposed included patient names, dates of birth, account ID numbers, and insurance identifiers such as Clover subscriber numbers. For a subset of individuals, the compromised accounts also accessed dates of service, provider names, or other health-related information. For fewer than 70 individuals, Social Security numbers were exposed. Clover stated that the compromised accounts did not have access to corporate financial or claims systems.
Four putative class action lawsuits were filed between July 22nd and July 24th, 2026, in the U.S. District Court for the Middle District of Tennessee, alleging negligence, unjust enrichment, breach of implied contract, and other claims related to the compromise of personal and health information. Clover has stated it intends to vigorously defend against those suits. Additional law firms have also announced investigations into the breach for potential further class action claims. In a related but separate matter, Clover members were also among those affected by the 2024 Change Healthcare breach, though that incident involved a third-party system rather than Clover’s own infrastructure.
Key Facts at a Glance
- Company or Organization: Clover Health Investments, Corp.
- Industry: Health Insurance / Medicare Advantage / Healthcare Technology
- Location: Franklin, Tennessee (corporate headquarters); Eagan, Minnesota (health plan operations)
- Incident type: Hacking/IT Incident (social engineering of employee accounts)
- Date of breach: July 3rd, 2026
- Date breach discovered: July 4th, 2026
- Date of consumer notification: July 17th, 2026 (SEC Form 8-K); September 14th, 2026 (HHS OCR filing)
- Total persons affected: 138,677
- Prior breach: Clover members were affected by the 2024 Change Healthcare breach involving a third-party system; no prior direct breach of Clover’s own systems identified
- Litigation status: Four putative class action lawsuits filed July 22nd–24th, 2026, in the U.S. District Court for the Middle District of Tennessee (Christian et al. v. Clover Health, No. 3:26-cv-01035; Holman v. Clover Health, No. 3:26-cv-01047; Griffin v. Clover Health, No. 3:26-cv-01049; Karwoski v. Clover Health, No. 3:26-cv-01054)
- Source: HHS OCR Breach Portal · Clover Health Official Breach Notification · Clover Health 10-Q (Q2 2026) · Fierce Healthcare · Healthcare Dive · HIPAA Journal
What Should You Do?
If you received a notice from Clover Health or believe your information may have been involved, there are several steps you can take now. Review any Explanation of Benefits statements from Clover or other insurers and check your medical records for services you do not recognize, as health information was involved in this breach. You can place a free fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to help prevent new accounts from being opened in your name. Request your free annual credit reports at AnnualCreditReport.com and monitor them regularly for unfamiliar activity. If your Social Security number was among those exposed, consider an extended fraud alert or a credit freeze. Report any suspected identity theft to the Federal Trade Commission at IdentityTheft.gov, which can provide a personalized recovery plan. Watch for any identity protection enrollment offer from Clover Health and note any enrollment deadline that may apply.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
