2026-10-30
Covered California Agent Data Breach: Names, License Numbers and SSN or FEIN Exposed in a Phishing Incident, and What Agents Should Do
Covered California, California's health insurance marketplace, filed a data breach notification with the California Attorney General (reported October 16, 2026). The notice to agents says that on May 13, 2026 an unauthorized individual used a phishing scheme to gain access to information relating to agents, and that agent spreadsheets were accessed. Those spreadsheets included each agent's name, agency name, license number, FEIN or Social Security number, and role within the agency. The notice does not say how many agents are affected, does not mention enrollees' (consumers') data, and does not offer credit monitoring. Covered California recommends placing a fraud alert with the three credit bureaus and following the Attorney General's Breach Help tips. This site's take: licensed agents and agency staff should place a fraud alert or credit freeze now, treat unexpected messages that cite their license number or agency as suspect, and use the contact listed in the notice.