Almeida Law Group is investigating a data breach at Humana Inc. The breach occurred on April 29th–30th, 2025 and was discovered on April 30th, 2025. If you were affected, contact Almeida Law Group.
About Humana Inc
Humana Inc. is an American for-profit health insurance company based in Louisville, Kentucky. It is the fourth largest health insurance provider in the United States, offering Medicare Advantage plans, Medicaid, commercial health coverage, and TRICARE, as well as healthcare services through its CenterWell segment, which includes pharmacy benefit management, primary care centers, home health services, and hospice care. Humana is a Fortune 500 company and trades on the NYSE under the ticker HUM.
What Happened?
Humana Inc was listed in a Texas Attorney General data security breach report (record ID BR-0005115). The incident occurred on April 29th, 2025 through April 30th, 2025 and affected 15,624 individuals in total. According to the filing, the data involved includes names, addresses, Social Security numbers, medical information, health insurance information, and dates of birth. Humana notified consumers by U.S. Mail and by posting notice at a company or special website. This report was published at the Texas OAG website on June 18th, 2026, more than thirteen months after the breach dates.
The April 29th–30th, 2025 incident appears to be separate from several other Humana security events that have come to light in recent years. Those include a February 2025 breach reported to the U.S. Department of Health and Human Services affecting approximately 8,553 individuals, an August 2025 unauthorized access incident tied to a vendor’s Oracle software vulnerability, a November 2025 breach attributed to the threat actor CL0P, and a February 2026 cyber incident involving documents held on an outside law firm’s file server. No independent media reporting or threat-actor attribution was identified specifically for this April 2025 incident. Multiple law firms are pursuing class action claims against Humana related to other breach incidents, including a filed class action in Kentucky federal court (Norris v. Humana Inc. and CenterWell Certified Healthcare Corp.) stemming from the March 2026 Texas AG-reported breach, and separate investigations by Edelson Lechtzin LLP and Dapeer Law, P.A. related to the Oracle vulnerability and law firm file server incidents respectively. No litigation specifically tied to the April 29th–30th, 2025 incident was identified.
Key Facts at a Glance
- Company or Organization: Humana Inc
- Industry: Health Insurance / Managed Care
- Location: Louisville, Kentucky
- Incident type: Unauthorized access / data breach
- Date of breach: April 29th, 2025 – April 30th, 2025
- Date breach discovered: April 30th, 2025
- Date of consumer notification: Posted at company website and sent by U.S. Mail
- Total persons affected: 15,624
- Prior breach: Yes — multiple prior incidents in 2025–2026
- Litigation status: Class action filed related to a separate March 2026 breach; investigations ongoing for other incidents; no litigation identified specifically for this April 2025 incident
- Source: Texas Attorney General Data Security Breach Report — BR-0005115 (https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005115); Wikipedia — Humana (https://en.wikipedia.org/wiki/Humana); Top Class Actions — Norris v. Humana class action (https://topclassactions.com/uncategorized/humana-class-action-claims-company-negligent-in-march-2026-data-breach/); National Law Review — Edelson Lechtzin LLP investigation (https://natlawreview.com/press-releases/humana-inc-data-breach-edelson-lechtzin-llp-launches-investigation-exposure); Dapeer Law — Humana investigation (https://www.dapeer.com/databreaches/humana-data-breach-investigation)
What Should You Do?
If you received a notice from Humana about this breach, enroll in any identity theft protection services offered before the deadline stated in your notice. Because Social Security numbers, medical information, and health insurance information were exposed, you should also place a fraud alert or credit freeze with the three major credit bureaus, monitor your credit reports at AnnualCreditReport.com, and watch your financial accounts closely for unfamiliar activity. Review your Explanation of Benefits statements and request a copy of your medical records to check for any services you did not receive. If you spot signs of identity theft or fraud, report them at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
