Almeida Law Group is investigating a data breach at Minnesota Health Insurance Network. If you were affected, contact Almeida Law Group.
About Minnesota Health Insurance Network
Minnesota Health Insurance Network (MNHI) is a health insurance brokerage firm based in Burnsville, Minnesota, that has been in operation since 1994. MNHI does not underwrite insurance itself but acts as an independent broker, helping individuals, families, and small businesses compare and purchase health insurance plans from major carriers. Because MNHI handles enrollment and plan information on behalf of its clients and their insurers, it functions as a business associate under federal health privacy law and may hold a range of personal, financial, and health-related records.
What Happened?
Minnesota Health Insurance Network was listed in an HHS Office for Civil Rights breach portal report filed on July 19th, 2026, identifying a hacking/IT incident affecting 3,656 individuals. The breached information was located on a network server. The company’s own notification, disclosed through a Massachusetts state filing, states that unauthorized access to its network occurred on March 16th and March 17th, 2026. An investigation and document review concluded on June 4th, 2026, and determined that a limited amount of personal information had been removed from the network. The company began notifying affected consumers on or about July 15th, 2026. According to the company notification, the data involved includes full names, Social Security numbers, driver’s license numbers or state identification numbers, other government identification numbers, dates of birth, financial account information, credit or debit card information, medical treatment or diagnosis information, and health insurance policy information. Individuals whose Social Security numbers were exposed are being offered complimentary credit monitoring services.
Separately, the Akira ransomware group posted a claim on its leak site on April 9th, 2026, alleging responsibility for the attack and claiming to have exfiltrated approximately 23 GB of corporate data. Ransomware.live estimates the attack date as March 17th, 2026, which aligns with the company’s disclosed unauthorized access window. This connection is supported by independent reporting from RedPacket Security, which also documented the Akira leak-site listing on April 9th, 2026. However, MNHI’s own notification does not name Akira or confirm a ransomware attack, and the data types listed in Akira’s claim — including passports, addresses, financial records, and contracts — have not been confirmed by the company. The Akira group’s allegations should be treated as attacker-side claims only. Law firm Shamis & Gentile P.A. is reported to be investigating the breach for potential class action claims, though no lawsuit had been filed as of the research date.
Key Facts at a Glance
- Company or Organization: Minnesota Health Insurance Network
- Industry: Health Insurance Brokerage
- Location: Burnsville, Minnesota
- Incident type: Hacking/IT Incident (Network Server)
- Date of breach: March 16th, 2026
- Date breach discovered: March 17th, 2026
- Date of consumer notification: July 15th, 2026
- Total persons affected: 3,656
- Identity theft protection offered: Complimentary credit monitoring for individuals whose Social Security numbers were affected
- Litigation status: Shamis & Gentile P.A. is investigating for potential class action claims; no lawsuit filed as of the research date
- Source: HHS Office for Civil Rights breach portal report; HIPAA Journal; ClaimDepot; Ransomware.live; RedPacket Security
What Should You Do?
If you received a notice from Minnesota Health Insurance Network, enroll in any complimentary credit monitoring being offered as soon as possible. You should also consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent new accounts from being opened in your name. Review your financial account statements closely for any unauthorized charges, and check your free credit reports at AnnualCreditReport.com for unfamiliar accounts or inquiries. Because medical treatment information and health insurance policy information were among the data types confirmed in this breach, you should also review any Explanation of Benefits statements from your health insurer and request copies of your medical records to check for services you did not receive. If you believe you are a victim of identity theft, report it and get a recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
