Humana class action claims company negligent in March 2026 data breach

Humana class action overview:

• Who: Colette Norris filed a class action lawsuit against Humana Inc. and its affiliate CenterWell Certified Healthcare Corp.
• Why: Norris claims Humana failed to properly secure and safeguard patients’ sensitive information.
• Where: The Humana class action lawsuit was filed in Kentucky federal court.

AA new class action lawsuit alleges Humana and its affiliate CenterWell Certified Healthcare Corp. failed to properly secure and safeguard patients’ sensitive information during a data breach reported this March.

Plaintiff Colette Norris claims Humana and CenterWell patients’ protected health information (PHI) and personally identifiable information (PII) was exposed during the data breach due to negligence on behalf of the companies. 

Norris argues Humana and CenterWell failed to adequately protect her and class members’ private information and failed to even encrypt or redact the highly sensitive information.

“This unencrypted, unredacted Private Information was compromised due to Defendants negligent and/or careless acts and omissions and its utter failure to protect their patients’ sensitive data,” the Humana class action lawsuit says.

Norris wants to represent a nationwide class of individuals whose private information was compromised in the Humana data breach.

Humana data breach claims company failed to encrypt sensitive data

Humana and CenterWell reported the data breach to the Office of the Texas Attorney General on March 6, 2026, according to the class action lawsuit. 

Norris argues the filing confirms that an unauthorized third-party accessed sensitive private information contained in the defendants’ IT networks. 

“Defendants failed to adequately protect Plaintiff’s and Class Members’ Private Information––and failed to even encrypt or redact this highly sensitive information,” the Humana class action says. 

As a result of the Humana data breach, she and class members have suffered injury, including invasion of privacy, lost or diminished value of private information, lost time and opportunity costs associated with attempting to mitigate the actual consequences of the data breach, loss of benefit of the bargain, and an increase in spam calls, texts and/or emails, the lawsuit alleges. 

Norris claims Humana and CenterWell are guilty of negligence, breach of implied contract and unjust enrichment. 

The plaintiff demands a jury trial and requests declaratory and injunctive relief and an award of actual, compensatory, nominal and punitive damages for herself and all class members.

A separate class action lawsuit, filed against Humana in 2023 and dismissed with prejudice in January 2024, accused the company of placing unlawful pre-recorded promotional messages.

Were you affected by the Humana data breach? Let us know in the comments.

The plaintiff is represented by John C. Whitfield of Whitfield Crosby & Flynn PLLC and Mariya Weekes of Milberg PLLC.

The Humana class action lawsuit is Norris, et al. v. Humana Inc., et al., Case No. 3:26-cv-00167-RGJ, in the U.S. District Court for the Western District of Kentucky.

Read About More Class Action Lawsuits & Class Action Settlements:

• Chairish class action claims company uses drip pricing to charge hidden fees
• Louis Vuitton hit with another class action in Salesforce-related data breach
• Nature’s Bakery faces another class action over ‘healthy’ fig bar claims
• Roku class action alleges cameras lost functionality without paid subscription