CLOVER HEALTH INVESTMENTS, CORP. /DE 8-K

What Happened
Clover Health Investments, Corp. (CLOV) reported on July 17, 2026 that it discovered anomalous login activity on July 4, 2026. The company says a threat actor used social engineering to gain access to three non‑managerial health plan employee accounts that handled member visit scheduling and broker-facing sales. Clover engaged third‑party cybersecurity experts, notified law enforcement, and says it contained and terminated the unauthorized access.

Key Details

• Discovery date: July 4, 2026; Form 8-K filed July 17, 2026.
• Number of compromised accounts: three non‑managerial employee accounts.
• Data types accessed: certain personally identifiable information (PII) and protected health information (PHI); no access to corporate financial or claims systems per preliminary findings.
• Company response: activated incident response, retained external cybersecurity experts, notified law enforcement, and is evaluating regulatory/legal notification requirements including notifying impacted members.

Why It Matters
For investors, the company states the incident is not believed to be material to its business, results, or financial condition as of the filing date, but the investigation is ongoing. Key risks include potential regulatory actions, required notifications, remediation costs, and any later findings about the scope of data accessed. Clover is taking steps to harden IT controls and will update stakeholders as required.