Home › Organisations › Humana, Inc. Humana, Inc. is an insurance organisation in Massachusetts. It appears on the Massachusetts Attorney General breach-notification register, the California Attorney General breach-notification register, the Washington State Attorney General breach-notification register, the Texas Attorney General breach-notification register, the Vermont Attorney General breach-notification register and the Delaware Attorney General data security breach database with 16 confirmed incidents; the most recent notice was filed on July 30, 2026.
Headquarters Louisville, United States Employees 51,600 (as of 2016) ISIN US4448591028 LEI 529900YLDW34GJAO4J06 Wikidata Q910866 Data as of October 17, 2026.
Disclosed July 30, 2026 Timeline July 30, 2026
Reported to regulator Regulator MA AG breach notification: 51 Massachusetts residents affected
source What a Massachusetts notice means Governed by M.G.L. c. 93H . Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.
Massachusetts breach-notification register ↗
Disclosed July 23, 2026 Timeline July 23, 2026
Reported to regulator Regulator VT AG breach notification: 3 Vermont residents affected
source Occurred April 29, 2025 Disclosed June 18, 2026 Records affected 15,624 Was I affected? →
Timeline June 18, 2026
Reported to regulator Regulator TX AG breach notification: 2,104 Texas residents affected
source What a Texas notice means Governed by Tex. Bus. & Com. Code §521.053 . Notice to the Attorney General is required when a breach affects at least 250 Texas residents.
Note: the published count is a total, not limited to Texas residents.
Texas breach-notification register ↗
Occurred February 17, 2025 Disclosed April 24, 2026 Records affected 15,624 Was I affected? →
Timeline April 24, 2026
Reported to regulator Regulator TX AG breach notification: 2,104 Texas residents affected
source Litigation Possible litigation — multiple candidate dockets found, not yet resolved to a single case. Disclosed March 18, 2026 Timeline March 18, 2026
Reported to regulator Regulator MA AG breach notification: 2 Massachusetts residents affected
source Litigation Possible litigation — multiple candidate dockets found, not yet resolved to a single case. Occurred July 31, 2023 Disclosed December 13, 2023 Timeline December 13, 2023
Reported to regulator Regulator CA AG breach notification: an unknown number of California residents affected
source What a California notice means Governed by Cal. Civ. Code §1798.82 . A copy of the notification must be sent to the Attorney General when a single breach requires notifying more than 500 California residents.
Note: no affected-count is published on this register.
California breach-notification register ↗
Occurred May 30, 2023 Disclosed September 22, 2023 Timeline September 22, 2023
Reported to regulator Regulator DE AG breach notification: 6,603 Delaware residents affected
source September 22, 2023
Reported to regulator Regulator DE AG breach notification: 6,603 Delaware residents affected
source September 22, 2023
Reported to regulator Regulator DE AG breach notification: 6,603 Delaware residents affected
source What a Delaware notice means Governed by 6 Del. C. §12B-102 . Notice to the Attorney General is required when a breach affects more than 500 Delaware residents.
Note: the count is Delaware residents only, not a total.
Delaware breach-notification register ↗
Disclosed August 12, 2023 Timeline August 12, 2023
Reported to regulator Regulator MA AG breach notification: 1 Massachusetts residents affected
source Disclosed July 25, 2023 Timeline July 25, 2023
Reported to regulator Regulator MA AG breach notification: 225 Massachusetts residents affected
source Confirmed incident US-WA — Unauthorized Access/Disclosure Occurred May 7, 2022 Disclosed September 8, 2022 Timeline September 8, 2022
Reported to regulator Regulator WA AG breach notification: 639 Washington residents affected
source What a Washington notice means Governed by RCW 19.255.010 . Notice to the Attorney General is required when a breach affects more than 500 Washington residents.
Note: the count is Washington residents only, not a total.
Washington breach-notification register ↗
Occurred August 25, 2021 Disclosed December 6, 2021 Timeline December 6, 2021
Reported to regulator Regulator CA AG breach notification: an unknown number of California residents affected
source Disclosed September 13, 2021 Timeline September 13, 2021
Reported to regulator Regulator MA AG breach notification: 7 Massachusetts residents affected
source Occurred October 12, 2020 Disclosed March 8, 2021 Timeline March 8, 2021
Reported to regulator Regulator CA AG breach notification: an unknown number of California residents affected
source Litigation Possible litigation — multiple candidate dockets found, not yet resolved to a single case. Disclosed March 4, 2021 Timeline March 4, 2021
Reported to regulator Regulator MA AG breach notification: 8 Massachusetts residents affected
source Litigation Possible litigation — multiple candidate dockets found, not yet resolved to a single case. Occurred May 30, 2018 Disclosed January 3, 2019 Timeline January 3, 2019
Reported to regulator Regulator CA AG breach notification: an unknown number of California residents affected
source Unverified claim US — Ransomware Attack This is an unverified claim — it has allegedly happened to this organisation, as posted by a source below, but has not been confirmed by a regulator, a court filing or the organisation’s own disclosure.
Timeline November 21, 2025
Claimed by threat actor (unverified) Claim Ransomware leak-site claim (ransomware_live)
source