AI-driven medical benefits servicer hit with data breach
Healthcare Interactive, a company that develops AI-based medical insurance benefit enrollment and billing solutions, confirmed last week that it experienced a data breach that involved personal data from customers being moved offsite by hackers.
The exact number of impacted individuals was not revealed. However, the company said stolen data included names, dates of birth, Social Security numbers, contact information and health insurance enrollment data—including ID numbers.
The company also said claims and patient care details were also compromised, including patient diagnoses, provider names, lab results, medical images and treatment plans.
Medical claims were also possibly taken, which includes things like account numbers and billing codes.
Healthcare Interactive said it has notified regulators of the cyberattack, which happened between July 8 and July 12, 2025. The intrusion was spotted on or around July 22, the company said, at which time it launched an investigation into the scope of the attack.
The vector of how hackers gained access, such as social engineering or phishing, was not revealed.
No evidence of information being misused
The company added that it notified impacted parties, who have been offered identity theft protection services, as required by the Health Insurance Portability and Accountability Act (HIPAA).
As of reporting, the incident does not appear on the federal government’s healthcare data breach tracker, run by the U.S. Department of Health and Human Services. When it does appear, additional details on the number of people impacted will be provided.
Healthcare Interactive said it is performing an internal audit of its security systems and procedures to secure against future intrusions. For now, the company added that it has no evidence the data has been used by any malicious third parties for identity theft or other criminal activity.
Additionally, the trove has not appeared for sale on popular dark web forums and no known hacker group has claimed credit for the theft.
HealthExec reached out to the company for comment and we will update this story with any statement we receive.
Its full announcement can be found by clicking here.
