Clover Health Investments Corp., a PPO and HMO organisation with a Medicare contract, says in a notification letter filed with South Carolina's Department of Consumer Affairs that on 4 July 2026 it determined it had experienced a cybersecurity incident involving unauthorised access to certain company applications and data. Its investigation found that between 3 and 4 July 2026 an unauthorised party gained access to credentials belonging to three non-managerial employees and used them to access company applications and data; Clover says it detected the incident on 4 July, ended the access within hours, engaged third-party cybersecurity experts and notified law enforcement.

Certain data was accessed and acquired, and a review completed on 28 August 2026 identified personal information about the people being notified; the published letter template does not list the types of data.

Clover says it is unaware of any attempted or actual misuse. The US Department of Health and Human Services breach portal lists Clover Health (Minnesota, health plan) with 138,677 individuals affected, submitted on 14 September 2026, as a hacking/IT incident involving a network server and other locations. Primary: Clover Health notification letter (South Carolina Department of Consumer Affairs); HHS OCR breach portal.

Correction (25 Oct 2026): the card now rests on Clover's notification letter and the HHS portal; a social-engineering description, a list of data types and a note about attribution from a wire report we cannot verify have been removed. (source: HHS)

Correction (25 Oct 2026): the card date has moved from 5 October to 14 September 2026, the breach report submission date the HHS portal lists; HHS gives a US date with no time. (source: HHS)