Healthcare Interactive, a developer of AI-driven medical insurance benefit enrollment and billing solutions, experienced a cybersecurity incident resulting in the unauthorized access of highly sensitive personal and health data. The breach exposed confidential records, including names, addresses, email addresses, phone numbers, dates of birth, Social Security numbers, health insurance details, medical record numbers, diagnoses, lab results, prescriptions, treatment information, medical images, doctors’ names, and insurance claims data. The incident affected an unknown number of individuals, with the compromised data encompassing both personal identifiers and protected health information (PHI). The breach prompted legal action, with Lynch Carpenter, LLP investigating potential claims for compensation on behalf of affected parties. The exposure of such extensive medical and financial data poses severe risks, including identity theft, financial fraud, and long-term privacy violations, particularly given the sensitivity of health-related records. The company has not disclosed the attack vector, but the scale and nature of the stolen data suggest a targeted intrusion with significant operational and reputational consequences.

Healthcare Interactive, Inc. (HCIactive), a health and incentive management platform provider, experienced a data breach between July 8–12, 2025, when an unauthorized actor copied files from its network. The compromised data included personal information (names, addresses, Social Security numbers, contact details), health insurance enrollment/claims data (policy details, member IDs, billing codes), and sensitive medical records (diagnoses, prescriptions, lab results, treatment histories, and images). While HCIactive found no evidence of misuse, the exposure of such highly sensitive data—particularly protected health information (PHI)—poses severe risks, including identity theft, medical fraud, and targeted phishing. The company responded by securing systems, conducting a forensic review, notifying regulators, and offering affected individuals complimentary credit monitoring. Enhanced security measures were implemented to prevent future incidents. The breach underscores vulnerabilities in healthcare data systems, where unauthorized access to PHI can have long-term repercussions for both patients and providers.