United Language Group, a Minneapolis-based translation, localisation and interpretation provider, has notified the HHS Office for Civil Rights of a breach affecting the protected health information of 4,649 individuals, with the data relating to work carried out for clients UnitedHealthcare and UnitedHealthcare Global. Suspicious activity was identified in parts of its network on 9 July 2025, and the forensic investigation confirmed unauthorised access between 8 and 9 July 2025. According to notification letters, the affected data included claims, billing and other member and provider communications, and spanned names and contact information, health insurance information, health information such as diagnoses, treatment and prescriptions, Social Security numbers, financial account information including credit and debit card numbers, and driver's licence, passport, military ID and residence-permit details, with the exact combination varying by individual. The case illustrates the exposure a health plan inherits from an ancillary vendor: an interpretation service holds clinical detail and identifiers well beyond the booking data it is usually assumed to process, and the intrusion ran for two days more than a year before affected people were told. The same HHS notification round also covered breaches at Desert Pulmonary & Sleep Consultants in Arizona and Azle Cube Smiles in Texas.

• Source article