Insightin Health Data Breach Lawsuit Investigation

On January 28, 2026, healthcare-technology provider Insightin Health notified regulators that an outside actor had accessed certain files in its network during a September 2025 security incident. The company has since confirmed that 487 Texas residents were affected. If you received a breach letter from Insightin Health, review the facts below and complete the free case evaluation form on this page to discuss your legal rights.

Key Takeaways

• Breach window: September 17–23, 2025
• Notice date: January 28, 2026
• Individuals affected: 487 (Texas residents)
• Type of attack: Network intrusion via vulnerability in a third-party application
• Data involved: Name plus additional personal details (exact elements vary by individual)
• Protection offered: 12 months of complimentary Cyberscout credit monitoring
• Actions taken by Insightin Health: Secured systems, enhanced safeguards, and reported the incident to law enforcement and regulators

What Happened?

Insightin Health detected suspicious activity in its network in September 2025. A forensic investigation confirmed that an unauthorized actor exploited an unknown vulnerability in a third-party application and may have accessed or copied files stored on a limited number of Insightin servers between September 17 and September 23, 2025. After containing the intrusion, the company worked with outside specialists to determine what information was affected and which individuals to notify.

Between December 4 and December 18, 2025, Insightin Health supplied incident details to its clients—including Martin’s Point Health Care—and collaborated with them to finalize the list of potentially impacted people. Official consumer notifications were mailed on January 28, 2026.

What Information Was Exposed?

The review found that affected files contained your name, and for many Texas residents may also have included address and health-insurance information. The specific data elements vary per person and were not detailed in the public notice.

Response by Insightin Health

According to the Vermont Attorney General filing, Insightin Health:

• Secured its environment immediately upon discovery
• Reviewed existing security policies and implemented further protections
• Reported the incident to law enforcement and governmental regulators
• Offered 12 months of complimentary credit monitoring and identity-protection services through Cyberscout (a TransUnion company)

Download the Official Breach Letter

Download Official Breach Notice (PDF)

Recommended Next Steps for Affected Individuals

1. Enroll in the free Cyberscout credit-monitoring service using the instructions in your letter.
2. Review your bank, credit-card, and insurance statements regularly for unfamiliar transactions.
3. Obtain free copies of your credit reports at AnnualCreditReport.com and look for errors or new accounts you did not open.
4. Consider placing a fraud alert or credit freeze with the major credit bureaus.
5. Keep copies of all correspondence related to this breach in case you pursue a legal claim.

Company Overview

Insightin Health, Inc. (Insightin Health) is a healthcare technology company that develops AI-driven member engagement and retention platforms for health-plan providers.

• Website: insightinhealth.com
• Headquarters: 333 W Ostend St., Suite 100, Baltimore, MD, United States
• Founded: 2016
• Industry: Healthcare Technology
• Privacy Policy: insightinhealth.com/privacy-policy
• Support/Contact: insightinhealth.com/contact
• Social: Facebook | X | LinkedIn | YouTube

Frequently Asked Questions

I received a data breach letter from Insightin Health — what should I do?

Follow the instructions in the letter to activate the complimentary Cyberscout credit monitoring, review your financial accounts for unusual activity, and consider additional safeguards such as a credit freeze.

How do I submit a claim related to the Insightin Health data breach?

Complete the free case evaluation form on this page. A data-privacy attorney will review your information and explain potential legal remedies at no cost to you.

Am I eligible to join a lawsuit against Insightin Health?

Eligibility depends on factors such as the type of data exposed and any financial or time costs you incurred. An attorney can help determine your specific rights.

What information did the Insightin Health breach expose?

The company confirmed that names plus additional personal information were present in the accessed files. For Texas residents, this may also include address and health-insurance information.

Did Insightin Health offer credit monitoring, and for how long?

Yes. Insightin Health is providing 12 months of complimentary credit-monitoring and identity-protection services through Cyberscout.

How can I get the official breach notice (PDF) for Insightin Health?

You can download the full notice directly from the Vermont Attorney General’s website using the button above.