Longevity Health Plan Data Breach 2026: 15,000 Nursing-Home Medicare Advantage Members Exposed. High-Vulnerability LTC Population. What To Do

What happened

Longevity Health Plan is a Medicare Advantage HMO Institutional Special Needs Plan (I-SNP), founded in 2017 and headquartered in Palm Beach Gardens, Florida. The plan exclusively serves Medicare-eligible residents of long-term care and assisted-living facilities — a nursing-home-based I-SNP model — operating in Florida, New York, Illinois, New Jersey, North Carolina, Michigan, and Colorado.

On approximately mid-January 2026, an unauthorized actor accessed Longevity’s network. Longevity filed with the HHS Office for Civil Rights on March 4, 2026, confirming 15,000 affected individuals classified as a Hacking/IT Incident at a network server. Specific intrusion date, discovery date, and notification-letter mailing date have not been publicly disclosed as of mid-May 2026.

No threat actor has been publicly identified. No leak-site listing has been observed.

Why this matters: vulnerable population context

The affected population is among the most vulnerable in healthcare: elderly long-term care and assisted-living residents, many with cognitive impairment, who rely on family members and guardians for identity-theft monitoring and cannot effectively self-remediate. The combination of likely-exposed SSN + DOB + Medicare Beneficiary Identifier (MBI) + financial-account data + medical data is a near-complete identity-theft toolkit, and this demographic is disproportionately targeted by fraudulent Medicare claim schemes and durable medical equipment scams.

What was likely stolen

Longevity has not issued a public itemization of compromised data categories. Plaintiffs’-firm intake pages list standard health-plan-breach categories: name, SSN, DOB, address, government IDs, medical information, financial information. Medicare Beneficiary Identifier (MBI) exposure is plausible given the plan’s operations but is not officially confirmed.

What Longevity is offering

No credit-monitoring vendor or enrollment duration has been publicly disclosed. No standalone breach-notice page exists on longevityhealthplan.com.

• Member contact: 1-888-332-5938

What to do (for family members and guardians)

1. If you are a guardian or family member of a Longevity Health Plan member, expect a notification letter — the member themselves may not be able to engage with it.
2. Place a credit freeze on the affected member’s behalf. As a guardian or conservator, you can request a freeze; each bureau accepts proof of guardianship.
3. Call 1-800-MEDICARE to request a new Medicare Beneficiary Identifier card for the affected member.
4. Watch for fraudulent durable medical equipment, hospice, and home-health claims appearing on the member’s Medicare Summary Notice.
5. Stop the ongoing flow of the member’s LTC data. HealthConsent files HIPAA restriction requests across Medicare Advantage networks, LTC pharmacy data brokers, and downstream entities.

Continue reading

• Your eight HIPAA rights, in plain English
• Other 2026 healthcare data breaches