A recent data breach at Clover Health Investments has exposed sensitive personal and health information, attributed to hackers using social engineering tactics to compromise employee accounts. The breach highlights the ongoing vulnerability of healthcare organizations to targeted attacks, which can have severe consequences for both the companies and their clients. The use of social engineering in this instance underscores the importance of robust employee training and awareness programs to prevent such incidents. Technical details of the breach, including the specific methods used by the hackers, have not been disclosed, but the incident serves as a reminder of the need for continuous monitoring and vigilance in the face of evolving threats1. This breach matters to security practitioners because it demonstrates the persistent risk of human-based vulnerabilities in even the most secure systems, so what this means for them is that prioritizing employee education and awareness is crucial to preventing similar breaches.