Clover Health Investments revealed in a regulatory filing on Friday that it discovered unusual login activity on some of its computer systems on July 4, and a subsequent investigation determined that a hacker had broken into three employee accounts using social engineering tactics.
The health insurer said the compromised accounts belonged to non-managerial employees who worked on member visit scheduling and sales support for brokers. While those accounts had access to some personal and protected health information, the company confirmed the hacker did not reach corporate financial systems or claims data.
After detecting the suspicious activity, Clover Health launched an investigation with the help of outside cybersecurity professionals, took steps to stop further unauthorized access, and alerted law enforcement.
The investigation remains ongoing, and the company is still working to determine exactly what information may have been viewed or taken. Clover Health said it believes its response successfully limited and ended the unauthorized access to its systems.
The company stated it does not believe the incident has had, or is likely to have, a significant impact on its business operations, financial condition, or financial results.
Clover Health added that it is reviewing applicable legal and regulatory obligations and will notify any affected members if that step is determined to be necessary.
Clover Health Investments is a U.S. health insurer that specializes in Medicare Advantage plans and technology solutions designed to support physicians.
