Unimed do Brasil

Unimed do Brasil, also known simply as Unimed, is a Brazilian healthcare cooperative federation that offers health insurance plans, hospital care, outpatient services, diagnostic examinations, and other medical assistance to beneficiaries. The organisation operates through a network of affiliated medical cooperatives that deliver services across the country, serving individuals, families, and corporate clients seeking private health coverage. Its core activity revolves around managing prepaid health contracts and coordinating access to a broad range of healthcare providers within its network. Unimed is recognised as the largest private health operator in Brazil, providing coverage to a substantial portion of the country's population seeking supplementary health plans. Its nationwide network includes thousands of physicians, hospitals, clinics, and laboratories that participate in the cooperative’s accredited provider list. Unimed also provides preventive care programs and wellness services aimed at improving the health outcomes of its covered population.

Unimed’s structure is based on a cooperative model in which each member cooperative is owned by the physicians who practice within it, and the federation coordinates common functions such as branding, negotiations, and shared services. Decision‑making within the federation follows a democratic principle where each member cooperative holds voting rights proportional to its size or participation. The organisation is subject to Brazilian regulations governing supplementary health, including oversight by the Agência Nacional de Saúde Suplementar (ANS), and must comply with the Lei Geral de Proteção de Dados (LGPD) for personal information handling. Its cooperative nature distinguishes it from traditional investor‑owned health insurers, emphasizing collective governance and professional autonomy among its physician members. Beyond insurance, Unimed supports clinical research, medical education, and public health initiatives through its affiliated institutions.

In March 2025, Unimed confirmed a cyber incident affecting a Kafka‑linked environment used for mobile‑app and chat integration between three of its cooperatives, limited to beneficiary‑operator communication for network searches and administrative requests. The company stated that the affected system does not store sensitive data, retains no interaction history, and lacks the capacity for the alleged message volume, with no evidence of data leakage observed so far. Investigations are being conducted under the National Data Governance Program, and Unimed reiterated its ongoing information security investments and its commitment to LGPD compliance. The organisation continues to allocate resources to strengthen its cybersecurity posture and to ensure adherence to LGPD standards.