What happened in the Medicare Compare USA data breach?

Medicare Compare USA, an insurance agency and call center that specializes in helping individuals navigate Medicare options, reported a data breach that compromised personal health information and financial data. The breach was caused by unauthorized access to the company's email accounts in late 2024.

When did the Medicare Compare USA data breach occur?

The Medicare Compare USA data breach occurred between November 5, 2024, and November 21, 2024. The investigation confirmed that unauthorized access to email accounts happened during this 16-day period in late 2024.

What caused the Medicare Compare USA data breach?

The data breach was caused by unauthorized access to email accounts at Medicare Compare USA. Attackers gained access to these email systems, which contained confidential data of individuals seeking Medicare assistance.

What type of information was exposed in the Medicare Compare USA breach?

The compromised data included highly sensitive information: names and dates of birth, bank account numbers, health insurance policy numbers, Medicare numbers, medical history information, treatment records and medical diagnoses, Social Security numbers, driver's license or state identification numbers, and financial account details.

How many people were affected by the Medicare Compare USA breach?

The number of affected individuals has not been disclosed by Medicare Compare USA. The company has not released specific figures regarding how many customers had their personal health information and financial data compromised.

What type of company is Medicare Compare USA?

Medicare Compare USA operates as an insurance agency and call center that specializes in helping individuals navigate Medicare options. The company assists customers with understanding and selecting appropriate Medicare coverage plans.

What is Medicare Compare USA doing to help affected customers?

Medicare Compare USA is offering affected individuals 12 free months of credit monitoring and identity protection services. The company has also notified state and federal regulators and contacted affected customers about the breach.

What authorities were notified about the Medicare Compare USA breach?

Medicare Compare USA notified both state and federal regulators about the data breach, as required by healthcare data protection laws. The company also directly contacted affected customers to inform them of the incident and available protection services.

Why is the Medicare Compare USA breach particularly concerning?

This breach is particularly concerning because it involves a comprehensive collection of highly sensitive data including medical records, Medicare numbers, Social Security numbers, financial information, and complete medical histories. The combination of health and financial data makes affected individuals vulnerable to both identity theft and medical fraud.

What should affected individuals do about the Medicare Compare USA breach?

Affected individuals should take advantage of the 12 months of free credit monitoring and identity protection services offered by Medicare Compare USA. They should also monitor their medical and financial accounts for suspicious activity, review Medicare statements carefully, and consider placing fraud alerts on their credit reports given the extensive nature of the exposed data.

Incident

Medicare Compare USA reports email breach exposing health and financial data

published: Sept. 16, 2025

Learn More

Medicare Compare USA, is reporting a data breach that compromised personal health information and financial data. The company operates as an insurance agency and call center that specializes in helping individuals navigate Medicare options.

The incident, occurred in late 2024. The cause of the incident was unauthorized access to email accounts at Medicare Compare USA. The investigation confirmed that unauthorized access occurred between November 5, 2024, and November 21, 2024 and that confidential data of individuals were exposed

The compromised data includes:

Names and dates of birth
Bank account numbers
Health insurance individual policy numbers
Medicare numbers
Medical history information
Treatment records and medical diagnoses
Social Security numbers
Driver's license or state identification numbers
Financial account details

The number of affected individuals is not disclosed.

The company notified state and federal regulators and customers and is offering affected individuals 12 free months of credit monitoring and identity protection services.

Medicare Compare USA reports email breach exposing health and financial data

Read More
The Hawaii State Judiciary reports data breach exposing …
GEICO data apparently breached, data sold on the …
Marshfield Clinic Health System reports email account compromise …
Allcare Medical Management reports data breach impacting FPA …
Citizens Property Insurance Corporation reports data breach