Healthcare technology company Clover Health Investments has disclosed a data breach impacting customers’ personal and health information.
Discovered on July 4, the incident was the result of a social engineering attack that compromised three non-managerial health plan employee accounts.
Clover Health Investments says it activated its response plan immediately after discovering the attack, and engaged third-party cybersecurity experts to contain and investigate the intrusion.
[ Read: New Index Tracks Material Breaches — And Refuses to Add Up the Losses ]
The compromised accounts “were assigned to employees who had member visit-scheduling and broker-facing sales functions,” the company says in a filing with the US Securities and Exchange Commission (SEC).
