Clover Health Reports Cyber Incident Involving Employee Account Access

• •Clover Health experienced a cyber incident involving unauthorized access to employee accounts.
• •The attack was executed through social engineering targeting non-managerial employees.
• •The investigation is ongoing, but no significant impact on business operations is anticipated.

On July 4, Clover Health Investments detected unusual login activity on its information systems, leading to the discovery that a hacker accessed three employee accounts via social engineering. The compromised accounts belonged to non-managerial health plan employees involved in member scheduling and sales. These accounts had access to some personal and protected health information, but not to corporate financial or claims systems. Clover initiated an investigation with external cybersecurity experts, took steps to contain the breach, and notified law enforcement. The investigation is ongoing, and the company is assessing what information may have been accessed. Clover does not believe the incident will materially impact its business or financial condition. Legal and regulatory requirements are being reviewed, and affected members will be notified if necessary.