Healthcare Interactive hciactive.com Healthcare Interactive data breach: what happened and what to do
Healthcare Interactive (HCIactive) reported that files were copied from its network in mid-2025. The total is 3,056,950 people. Data can include names, dates of birth, contact details, Social Security numbers and medical and insurance details.
View all 13,115 breaches- Breach date
- 17 Jun 2025
- Affected
- 3,056,950
- Data exposed
- Names, Dates of birth, Email addresses, Phone numbers, Physical addresses, Social security numbers, Health insurance information, Medical information
- Last updated
Healthcare Interactive, also called HCIactive, provides services to health plans and similar organizations. That means many of the people affected never dealt with it directly.
What happened
The company's notice says an unauthorized actor copied certain files from its network on or about July 8 to 12, 2025. The Oregon filing describes a longer window, from June 17 to July 22, 2025, and the attorney general listings use June 17. Letters began going out on December 3, 2025.
The total is 3,056,950 people, per the filing reported to the Oregon Attorney General in January 2026. Counts quoted for single states are smaller: for example, the Washington list shows 46,840 residents, and a Maine filing counted 87,565 people. Those are parts of the total. An early report to the U.S. Department of Health and Human Services used a placeholder of 501 while the review continued.
What was exposed
Per the notice, the data varies and can include name, date of birth, email address, phone number, mailing address, Social Security number, blood results or biometric data, and insurance and medical details.
What to do
With Social Security numbers involved, a credit freeze is the best single step. Review insurer statements for claims you didn't make, and expect emails and calls that mention your plan or a recent claim.
What to do if you were in it
- 1
Freeze your credit
A freeze at Equifax, Experian and TransUnion stops new accounts being opened in your name. It's free, takes a few minutes per bureau and you can lift it when you need credit. Check your bank and card statements monthly.
- 2
Check your insurance statements
Look for claims, prescriptions or visits you don't recognize and report them to your plan.
- 3
Treat plan-related messages as suspect
Scammers use health plan details to sound real. Call the number on your member card, not the one in the message.
- 4
Use any monitoring offered in your letter
Enroll by the deadline shown in your letter. It costs nothing.
- 5
Check whether your email or phone is in this and other breaches
Run a free scan at Serus. Serus monitors breach databases and the dark web and alerts you when your data appears. It can't remove data from a breach, but it tells you what to do next.
Frequently asked
Was I affected by the Healthcare Interactive breach?
Letters began on December 3, 2025. Many people were included through a health plan or employer, so the name on the letter may be a different organization.
What was exposed?
Names, dates of birth, contact details, Social Security numbers, and medical or insurance details, varying by person.
How many people were affected?
The Oregon Attorney General filing lists 3,056,950 people in total.
Should I change my password?
Passwords aren't named in the notice. Change any you reuse as a precaution.
Sources
- insurancenewsnet.com/oarticle/massive-data-breach-at-healthcare-interactive-affects-over-3-million-including-103000-sc-residents
- teiss.co.uk/news/hciactive-data-breach-exposes-sensitive-personal-data-of-over-3-million-individuals-17025
- emeryreddy.com/wp-content/uploads/2025/12/Healthcare_Interactive_-_Notice_of_Data_Event_-_ME.pdf
- atg.wa.gov/data-breach-notifications
Something wrong or out of date? Tell us and we'll re-check it.
