Clover Health breach leaks data after social engineering attack

Clover Health Investments has reported a data breach affecting customers' personal and health information due to a social engineering attack on July 4, which compromised the accounts of three non-managerial employees. The company responded promptly by engaging cybersecurity experts to contain and investigate the breach. The compromised accounts had access to personally identifiable information and protected health information but did not reach financial or claims systems.

Clover believes the attack has been contained but is still assessing the full scope of the breach. No specific threat actor has been identified, and no ransomware group has claimed responsibility.