Almeida Law Group is investigating a data breach at UnitedHealth Care Services, Inc. Single Affiliated Covered Entity. If you were affected, contact Almeida Law Group.
About UnitedHealth Care Services, Inc. Single Affiliated Covered Entity
UnitedHealthcare Services, Inc. is a subsidiary of UnitedHealth Group, the largest health insurer in the United States. Founded in 1974, it provides health insurance to individuals and commercial clients. The entity is reported under Connecticut in the HHS filing, though UnitedHealthcare Services, Inc. is based in Minnetonka, Minnesota, and its parent company, UnitedHealth Group, is headquartered in Hopkins, Minnesota.
What Happened?
UnitedHealth Care Services, Inc. Single Affiliated Covered Entity was listed in an HHS Office for Civil Rights breach portal report submitted on June 19th, 2026. The incident was classified as a hacking/IT incident involving email systems, and a business associate was indicated as present. A total of 37,384 individuals were reported as affected. The specific details of what the hacking incident entailed, which business associate was involved, and what data was exposed have not been publicly disclosed at this time. No threat actor has been attributed to this particular incident.
This breach is a distinct incident from UnitedHealth Group’s prior major security events, including the February 2024 Change Healthcare ransomware attack by ALPHV/BlackCat — the largest healthcare data breach in U.S. history, affecting approximately 190 million individuals — and a 2025 hacking incident at Episource, another UHG subsidiary, affecting approximately 5.4 million individuals. At least one law firm has opened an investigation into this June 2026 email breach specifically. No lawsuits directly tied to this incident have been publicly reported yet, though UnitedHealthcare faces a broad wave of class action litigation in 2026 spanning data breaches, claim denials, and AI algorithm concerns.
Key Facts at a Glance
- Company or Organization: UnitedHealth Care Services, Inc. Single Affiliated Covered Entity
- Industry: Health Insurance / Health Plan
- Location: Connecticut (as reported); UnitedHealthcare Services, Inc. based in Minnetonka, Minnesota
- Incident type: Hacking/IT Incident (Email)
- Total persons affected: 37,384
- Prior breach: Yes — UnitedHealth Group has been involved in multiple prior significant breaches, including the 2024 Change Healthcare ransomware attack (~190 million affected) and the 2025 Episource hacking incident (~5.4 million affected)
- Litigation status: No lawsuits specifically tied to this June 2026 incident have been publicly reported; broader UnitedHealthcare litigation is ongoing in 2026
- Source: HHS Office for Civil Rights breach portal report; ClaimDepot investigation; Security.org UnitedHealthcare breach guide
What Should You Do?
If you believe you may have been affected by this breach, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your financial accounts and credit reports closely. You can request free annual credit reports at AnnualCreditReport.com. Because specific data types have not been publicly disclosed in this incident, remain alert for any suspicious communications, phishing attempts, or unauthorized account activity. If you are notified that health information was involved, also review your Explanation of Benefits statements and medical records for any unfamiliar charges or services. If you experience signs of identity theft, report them at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
