Notice of Data Privacy Event

Oscar Health, Inc. (“Oscar”) is providing notice of an event which may impact the privacy of information related to certain individuals. Oscar is not aware of any impact to individuals’ Social Security numbers, bank account information, or credit card information as a result of this event. Instead, this event purely involves a potential impact to health insurance information. Oscar is also not aware of any attempted or actual misuse of the involved information at this time. Oscar is nonetheless notifying potentially impacted individuals in order to provide information about the event, and to provide resources that potentially impacted individuals can take advantage of to better protect against potential misuse of their information, should they feel it appropriate to do so.

What Happened? On December 31, 2025, Oscar became aware that member identification cards and other enrollment information related to 2026 health insurance coverage was inadvertently mailed to old and potentially incorrect member addresses. Upon becoming aware of this information, Oscar immediately took steps to correct the issue in order to prevent it from reoccurring in the future, and launched an internal investigation to determine the nature and scope of the event. Oscar then began a diligent and comprehensive review process in order to identify the individuals whose information may have been impacted and locate current address information for potentially impacted individuals so it could proceed with notification. That process is ongoing, and once complete, Oscar will be providing written notification to potentially impacted individuals for whom they could locate an address.

Although Oscar has no evidence of any attempted or actual misuse of the information at this time, they are providing notice out of an abundance of caution.

What Information Was Involved? While the actual types of data impacted vary by individual, the investigation determined that the following types of information may be impacted: name, health insurance policy number, and health insurance plan information. No electronic information was affected – this event solely related to physical mailings to old and potentially incorrect member addresses. At this time, Oscar has no evidence that individuals’ information was subject to actual or attempted misuse as a result of this incident.

What We Are Doing. The confidentiality, privacy, and security of information within our care is among Oscar’s highest priorities. Upon learning of this event, Oscar immediately took steps to remedy the issue and evaluate other systems for administrative accuracy. Oscar will also be providing complimentary credit monitoring to all potentially impacted individuals for whom they have address information and were able to mail notification letters.

For More Information. If you have additional questions, please contact Oscar’s toll-free dedicated assistance line at 833-289-1660, Monday through Friday, excluding holidays, from 8:00 am to 8:00 pm Eastern time. You may also write to Oscar at 75 Varick Street, 5th Floor, New York, NY 10013.

Additional Information

Consumers may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the steps they can take to protect your personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Consumers can obtain further information on how to file such a complaint by way of the contact information listed above. Consumers have the right to file a police report if they ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, consumers will likely need to provide some proof that they have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and the relevant state Attorney General. This notice has not been delayed by law enforcement.

For District of Columbia residents, the District of Columbia Attorney General may be contacted at: 400 6th Street, NW, Washington, D.C. 20001; (202) 442-9828; and oag.dc.gov.

For New York residents, the New York Attorney General may be contacted at: Office of the Attorney General, The Capitol, Albany, NY 12224-0341; 1-800-771-7755; or https://ag.ny.gov.