250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms

Two separate data breaches impacted over 250,000 individuals associated with Clover Health Investments and AngMar Management Services in 2026. Clover Health's breach was caused by social engineering targeting non-managerial employee accounts, leading to the theft of PII and PHI including names, dates of birth, insurance identifiers, and account numbers. AngMar Management Services detected suspicious activity linked to the Interlock ransomware group, which published stolen data on a leak site. The stolen data included extensive patient information such as Social Security numbers, diagnosis details, medical history, and prescription data. Both organizations notified the US Department of Health and Human Services and were listed on its data breach portal.

The breaches exposed sensitive personal and health information of approximately 264,873 individuals, including PII and PHI such as names, birth dates, Social Security numbers, insurance identifiers, medical histories, and prescription details. This exposure increases the risk of identity theft, fraud, and privacy violations for affected individuals. The involvement of a ransomware group in the AngMar breach suggests potential extortion and further operational disruption risks for the organization.

No specific remediation or patch is applicable as these incidents are breaches resulting from social engineering and ransomware attacks. Organizations should follow incident response protocols, notify affected individuals, and comply with regulatory reporting requirements as done by the affected companies. Enhanced employee training on social engineering, robust access controls, and ransomware defenses are recommended to reduce future risk.