Impersonation Scam at Sunshine Health Exposes Data of Over 40,000 Individuals

On May 6, 2026, Sunshine Health experienced a data security incident where a caller impersonating a trusted individual deceived an employee into disclosing health plan files to an unauthorized party. The incident has compromised the sensitive personal information of at least 41,569 individuals, including names, dates of birth, medical information, and health plan coverage details. Sunshine Health has initiated an investigation with external cybersecurity experts and notified law enforcement. Although there is no evidence of misuse of the compromised information, affected individuals are advised to monitor their credit reports and account statements for suspicious activity. The company has implemented additional employee training to prevent similar incidents in the future. The incident was disclosed in a notice on Sunshine Health's website.

Key Points: • Over 40,000 individuals' sensitive data compromised due to impersonation scam. • Sunshine Health has launched an investigation and notified law enforcement. • Affected individuals are advised to monitor their credit reports for suspicious activity.