AngMar and Clover Health exposed 250,000 records

AngMar Management Services and Clover Health appear in October 2026 coverage as two U.S. health organizations affected by security incidents that took place between July and September 2026. Available reporting says roughly 250,000 people may have been affected in total, tied to healthcare providers in New Jersey and Texas.

What is known about AngMar Management Services?

AngMar detected unusual activity on July 20, 2026, and, according to a notice filed with the Massachusetts Attorney General, determined that an unauthorized actor had accessed its IT environment around July 18. That filing uses language suggesting possible access to or acquisition of data, not confirmation that every item was actually exfiltrated.

The same available coverage adds that a Health-ISAC bulletin repeated a claim that Interlock listed AngMar in August and alleged it had exfiltrated more than 700 GB of corporate and patient data before the network disruption. That point, however, was presented by the source itself as an unconfirmed claim, not as something verified by an AngMar notice or independent forensic review.

What happened with Clover Health?

The available reporting places Clover Health among the U.S. health organizations affected by incidents during the same period, between July and September 2026. Ground News and other publications cited in the material include it in the total of about 250,000 people impacted by the reported breaches at healthcare firms in New Jersey and Texas.

The material provided does not include a primary notice comparable to AngMar's that would describe the Clover Health incident in more detail. For that reason, the available note is limited to the aggregate mention in October 2026 coverage and the total scope reported.

Why is the case still under review?

Because part of the ransomware attribution still appears in a secondary layer of reporting rather than in a primary statement from the affected company. In AngMar's case, the regulatory notice confirms unusual activity and unauthorized access, but it does not definitively validate the later claim that data was fully exfiltrated.

The material also makes clear that The Tech Edvocate, Ground News, SecurityWeek, Rescana, Paubox, and Health-ISAC are part of the reporting package available on these incidents. Based on the facts provided, only this can be stated with confidence: AngMar and Clover Health were hit by incidents, the affected universe was around 250,000 people, and the full attribution of scope in some portions remains unverified at the primary-source level.