Clover Health discloses data breach after three employee accounts compromised

By: Rebecca Pifer Parduhn Source: Healthcare Dive

Dive Brief

• Clover Health disclosed a data breach in a securities filing on Friday, July 17, 2026.
• On July 4, Clover discovered that a hacker had compromised the accounts of three employees, potentially accessing members' personal and protected health information.
• The company has taken steps to contain the breach, notified law enforcement, and is investigating the scope of impacted data.
• Clover has not disclosed whether any data was stolen or how many individuals may be affected. The company has approximately 156,000 members across five states.

Dive Insight

Data breaches in healthcare have surged over the past decade, as outdated IT systems and limited cybersecurity resources are exploited by malicious actors seeking lucrative personal and medical data.

According to Clover's filing, three employees fell victim to social engineering—a tactic in which hackers manipulate individuals into granting IT access or disclosing information. Phishing, the most common source of data breaches, is a form of social engineering.

The affected employees worked on scheduling member visits and managing Clover's broker relationships. They had access to certain personally identifiable information and protected health information, but did not have access to corporate financial or claims systems.

"While the investigation is ongoing into the precise nature, scope, and extent of data that was subject to unauthorized access and acquisition, the Company believes that its rapid response successfully contained and terminated the unauthorized access," Clover's filing stated.

Clover said it is taking steps to strengthen its cybersecurity, though the company does not expect the breach to materially impact its operations or finances. This is a notable bright spot, given how severely data breaches can disrupt organizations and how recovery costs can erode profits.

For context, healthcare giant UnitedHealth spent $3.1 billion to recover from a 2024 ransomware attack on its subsidiary Change Healthcare. That attack compromised the data of more than 190 million people—over half the U.S. population—and stemmed from a lack of basic cybersecurity protocols, according to UnitedHealth executives.

Company Background

Tennessee-based Clover Health was founded in 2014 as one of a wave of startups aiming to disrupt the insurance industry. The company operates a Medicare Advantage insurance business and a software platform called Clover Assistant, which aggregates patient data to assist clinicians with treatment decisions.

Clover, which went public in early 2021, is one of the fastest-growing Medicare Advantage plans. However, it has struggled to translate growth into sustainable profitability.

Despite these challenges, Clover reported more than $27 million in profit in the first quarter of 2026, compared to a $1.3 million loss during the same period last year. The company expects 2026 to be its first profitable year under generally accepted accounting principles.

This story was originally published on Healthcare Dive. To receive daily news and insights, subscribe to their free newsletter.