Mirra Health Suspended in Florida Following Data Breach Affecting 23,000 Medicare Members
TALLAHASSEE, Fla. – Florida Insurance Commissioner Mike Yaworsky has ordered the immediate suspension of Mirra Health Care LLC’s certificate of authority after the company was found to have outsourced claims processing and enrollment data handling to unlicensed entities in India and the Philippines. The action, taken on Tuesday, March 24, 2026, impacts over 23,000 Florida Medicare Advantage enrollees, many of whom have chronic or long-term health needs.
Data Breach and Regulatory Concerns
State investigators determined that Mirra Health jeopardized the safety of thousands of Floridians by sharing sensitive health data with unauthorized companies overseas. The company handles claims and enrollment work for Medicare Advantage members, and by outsourcing this work without proper authorization, it violated state insurance laws. The Florida Office of Insurance Regulation (OIR) found that Mirra Health delegated services without obtaining advance written approval or providing notification to the Florida Health Maintenance Organizations (HMOs) as required by contract.
Vulnerable Populations at Risk
The exposed sensitive health information pertains to participants in Chronic Condition Special Needs Plans (C-SNP), Dual Eligible Special Needs Plans (D-SNP), and Institutional Special Needs Plans (I-SNP). C-SNP plans serve individuals with severe or disabling chronic conditions; D-SNP plans cover those eligible for both Medicare and Medicaid; and I-SNP plans cater to individuals requiring services in long-term care facilities, including skilled nursing facilities and intermediate care facilities for individuals with intellectual disabilities.
Commissioner Yaworsky’s Response
“Mirra Health’s business practices are extremely reckless, especially when it comes to exposing the sensitive health information of vulnerable Florida residents,” said Commissioner Yaworsky. “I am ordering an immediate suspension of the company’s certificate of authority, as the company’s actions are not competent or trustworthy.”
Investigation Findings and Contract Violations
During the investigation, Mirra Health reportedly failed to turn over all required contracts, constituting a separate violation of Florida law. According to CBS12, regulators similarly discovered that the company passed along work to offshore partners without securing approval from the Florida HMOs it serves, a requirement outlined in their contracts.
OIR’s Concerns and Final Order
The OIR’s final order states that Mirra Health’s practices have created “ongoing, unauthorized exposure of sensitive claims and enrollment data to foreign entities beyond the Office’s regulatory reach and without any contractual mechanism for immediate termination, thereby depriving the Office and the Florida HMOs of the ability to protect these vulnerable residents.” The Capitolist reports that the company’s actions pose an imminent threat to the public health, safety, and welfare of Florida residents.
Affected Entities
Mirra Health performs administrative functions for three Florida HMOs: Secur, Solis, and Ultimate. The suspension impacts 23,119 enrollees across these plans.