Health insurance information leaked: what it means and what to do
Risk level: high. Can you change it: no. Found in 4 breaches in this directory.
What this data is
Your health insurer, policy or member number, Medicare or national health card number, level of cover, claims history and sometimes the treatments and providers you claimed for.
The risk on its own
A member number can be used to claim treatment or prescriptions in your name, which is known as medical identity theft. Claims history is also health information, because it shows which services you used, such as mental health, fertility or cancer care. Unlike a card, a claims history cannot be cancelled.
The risk combined with other data
With your name, date of birth and address, criminals can make fraudulent claims, obtain prescription medicines or get treatment under your policy. False treatments added to your records can put your own future care at risk. Claims details also fuel extortion, as happened when stolen records from a major insurer breach were published online.
How criminals use it
Someone receives treatment or prescription medicine using your member number, and the claims land on your record.
A fake insurer email about a claim refund asks you to log in through a link.
Criminals publish or threaten to publish claims that show treatment for mental health, pregnancy termination or addiction.
Fraudulent claims use up your annual limits, so your own genuine claims are declined.
What to do now
Log in to your insurer's app or website and review claims and benefits used for any treatment you did not have.
Ask the insurer for a new member number or card, and in Australia request a replacement Medicare card through myGov if that number leaked.
In the US, read every Explanation of Benefits statement and ask providers to correct any records created by fraud.
Change the insurer account password and turn on two-factor authentication.
If health information is published or used to threaten you, report it to police and the insurer, and do not pay.
Frequently asked questions
What is medical identity theft?
When someone uses your insurance or health card details to get treatment, prescriptions or payments. It can leave false information in your medical records as well as a bill.
Can I get a new health insurance number?
Many insurers will reissue a member number after fraud or a breach, and in Australia a Medicare card can be replaced through myGov. Ask directly.
Could this affect my cover?
A breach should not change your cover or premiums. Fraudulent claims can eat into limits or distort your records, so dispute them with the insurer quickly.
Breaches that exposed this data
Unverified Data Source: 2021-01-26, 11M accounts, Bank account numbers, Credit status information, Dates of birth, Email addresses, Employers, Health insurance information
Медицинская лаборатория Гемотест (Gemotest): 2022-04-22, 6.3M accounts, Dates of birth, Email addresses, Genders, Government issued IDs, Health insurance information, Names
DentaQuest: 2026-05-23, 2.6M accounts, Dates of birth, Email addresses, Genders, Government issued IDs, Health insurance information, Names
Health Now Networks: 2017-03-25, 322K accounts, Dates of birth, Email addresses, Genders, Health insurance information, IP addresses, Names
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.