Humana Inc. Data Breach Notice (Vermont Attorney General)

The filing from Humana Inc. to the Vermont Attorney General on July 23, 2026 lists Social Security numbers and health records as exposed for three people. If you received a letter from Humana about this incident, those two categories are now the ones that matter most in your situation.

Your Social Security Number Cannot Be Replaced

A Social Security number does not expire and cannot be reissued on request the way a credit card or password can. Once it leaves the organisation’s control it remains usable for identity theft, tax fraud, loan applications, and government benefit claims for the rest of your life. The three affected individuals now carry that permanent risk.

Health records add another lifelong exposure. Medical information can be used for insurance fraud, prescription scams, employment discrimination, or blackmail. Unlike a credit card number, a diagnosis or treatment history cannot be cancelled or reissued. The combination of an SSN and detailed health data creates a profile that is unusually valuable to criminals because it supports both financial fraud and medical identity theft at the same time.

What the Record Does Not Tell You

The Vermont filing does not disclose how the information was accessed, whether the cause was an external attack, a misconfiguration, or an insider, or how long the data may have been available. It also does not name any passwords, account credentials, or login details. No password rotation is required or useful for this incident.