Clover Health says employee accounts accessed in cyber incident

Health insurer Clover Health Investments has disclosed a cybersecurity incident where a hacker gained access to three employee accounts through social engineering. The company detected unusual login activity on July 4 and subsequently identified the breach.

The affected accounts belonged to non-managerial employees involved in member visit scheduling and broker-facing sales. While these accounts could access some personal and protected health information, Clover Health stated that corporate financial or claims systems were not compromised.

Clover Health has launched an investigation with external cybersecurity experts, taken steps to contain the activity, and notified law enforcement. The company believes the unauthorized access has been curbed and ended, and it does not anticipate a material impact on its business or financial results. An ongoing review will determine what information may have been accessed, and affected members will be notified if necessary.