Latest / Federal (SEC) / July 2026

CLOVER HEALTH INVESTMENTS, CORP. /DE

CLOVER HEALTH INVESTMENTS, CORP. /DE notified SEC Form 8-K on Jul 17, 2026 of a data breach, which occurred on Jul 4, 2026. Data exposed: Financial / bank account, Medical / health information, Usernames / passwords.

Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
CLOVER HEALTH INVESTMENTS, CORP. /DE
Source
SEC Form 8-K · source record
Date reported
Jul 17, 2026
Date(s) of breach
July 4, 2026
Residents affected
Not published by this source
Data exposed
Financial / bank account Medical / health information Usernames / passwords
Notice letter
Form 8-K filing
Discovered
Jul 4, 2026, as stated in the letter
"On July 4, 2026, Clover Health Investments, Corp. (the “Company”) became aware of anomalous login activity on certain of its information systems."
Days to notice
13 days from discovery (Jul 4, 2026) to the Federal (SEC) record (Jul 17, 2026).
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-11-12 23:17 UTC
Ticker
CLOV

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 23:17 UTC on Nov 12, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.

Item 8.01 excerpt

Item 8.01. Other Events. On July 4, 2026, Clover Health Investments, Corp. (the “Company”) became aware of anomalous login activity on certain of its information systems. The Company immediately activated its incident response procedures, initiated an investigation with assistance from leading third-party cybersecurity experts, and took steps to contain the activity. The Company also notified law enforcement. The investigation subsequently showed that a threat actor gained access to three non-managerial health plan employee accounts through social engineering. Based on preliminary findings from the Company’s investigation, those accounts were assigned to employees who had member visit-scheduling and broker-facing sales functions. The employee accounts had access to certain personally identifiable information and protected health information, but had no access to corporate financial or claims systems. While the investigation is ongoing into the precise nature, scope, and extent of data that was subject to unauthorized access and acquisition, the Company believes that its rapid response successfully contained and terminated the unauthorized access. Based on information available as of the date of this filing, the Company does not believe that the incident has had, or is reasonably likely to have, a material impact on its business, financial condition or results of operations. The Company takes the privacy and security of its member data very seriously and has taken, and continues to take, steps to further harden its IT environment. The Company continues to evaluate applicable regulatory and legal notification requirements and will make all required notifications based on its findings, including to impacted members. Forward-Looking Statements This Current Report on Form 8-

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.