Insurer Anthem will pay record $16M for massive data breach

The nation’s second-largest health insurer has agreed to pay the government a record $16 million to settle potential privacy violations in the biggest known health care hack in U.S. history, officials said Monday.

Posted: Oct 15, 2018 6:48 PM

WASHINGTON (AP) — The nation’s second-largest health insurer has agreed to pay the government a record $16 million to settle potential privacy violations in the biggest known health care hack in U.S. history, officials said Monday.

The personal information of nearly 79 million people — including names, birthdates, Social Security numbers and medical IDs — was exposed in the cyberattack, discovered by the company in 2015.

The settlement between Anthem Inc. and the Department of Health and Human Services represents the largest amount collected by the agency in a health care data breach, officials said.

“When you have large breaches it erodes people’s confidence in the privacy of their sensitive information, and we believe such a large breach of trust merits a substantial payment,” said Roger Severino, director of the HHS Office for Civil Rights. The office also enforces the federal health care privacy law known as HIPAA, or the Health Insurance Portability and Accountability Act.

Severino said the Anthem settlement is nearly three times larger than the previous record amount paid to the government in a privacy case. That sends a message to the industry that “hackers are out there always and large health care entities in particular are targets,” he added.

The Blue Cross-Blue Shield insurer also agreed to a corrective action plan under government monitoring, which involves a process for the company to assess its electronic security risks, take appropriate countermeasures and maintain ongoing surveillance.

Indianapolis-based Anthem covers more than 40 million people and sells individual and employer coverage in key markets like New York and California. The payment is in lieu of civil penalties that HHS may have imposed. Anthem admitted no liability. The civil case involving privacy laws is separate from any other investigation the government may be pursuing.

In a statement Monday, Anthem said it’s not aware of any fraud or identity theft stemming from the breach. The company provided credit monitoring and identity theft insurance to all customers potentially affected.

“Anthem takes the security of its data and the personal information of consumers very seriously,” the statement said. “We have cooperated with (the government) throughout their review and have now reached a mutually acceptable resolution.”

The company discovered the data breach in early 2015, but hackers had been burrowing into its systems for weeks. Security experts said at the time that the size and scope of the attack indicated potential involvement by a foreign government.

Hackers used a common email technique called spear-phishing in which unwitting company insiders are tricked into revealing usernames and passwords. The Anthem attackers gained the credentials of system administrators, allowing them to probe deeply into the insurer’s systems.

HHS said its investigation found that Anthem had failed to deploy adequate measures for countering hackers. The company lacked an enterprisewide risk analysis, had insufficient procedures to monitor activity on its systems, failed to identify and respond to suspected or known security incidents, and did not implement “adequate minimum access controls” to shut down intrusions from as early as February 2014.

Terre Haute
Few Clouds
71° wxIcon
Hi: 90° Lo: 70°
Feels Like: 71°
Robinson
Clear
71° wxIcon
Hi: 89° Lo: 68°
Feels Like: 71°
Indianapolis
Overcast
72° wxIcon
Hi: 88° Lo: 70°
Feels Like: 72°
Rockville
Broken Clouds
69° wxIcon
Hi: 88° Lo: 69°
Feels Like: 69°
Casey
Broken Clouds
74° wxIcon
Hi: 90° Lo: 70°
Feels Like: 74°
Brazil
Few Clouds
71° wxIcon
Hi: 89° Lo: 69°
Feels Like: 71°
Marshall
Few Clouds
71° wxIcon
Hi: 90° Lo: 69°
Feels Like: 71°
Evening thunderstorms!
WTHI Planner
WTHI Temps
WTHI Radar

Latest Video

Image

Monday: Afternoon thunderstorms, heat index: ~100. High: 88

Image

ISU students moving onto campus

Image

Parents respond to VCSC plan

Image

Sunday Morning Forecast Update

Image

Sister responds to ACLU lawsuit

Image

Saturday Morning Forecast Update

Image

Terre Haute South volleyball team, coaching staff placed in quarantine

Image

ISU Postpones 2020 football season

Image

Local small business creating custom masks for kids

Image

Knox County holds Watermelon Festival

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 195380

Reported Deaths: 7845
CountyConfirmedDeaths
Cook1114474928
Lake12670446
DuPage12233520
Kane9759305
Will9236344
St. Clair4006161
Winnebago3779131
McHenry3189114
Madison259176
Kankakee178268
Rock Island174536
Champaign166919
Peoria160735
Kendall137723
Unassigned1368209
Sangamon124733
DeKalb93630
LaSalle76624
Boone76523
Jackson71719
McLean65115
Macon62423
Adams5195
Tazewell5188
Coles47220
Randolph4647
Ogle4105
Clinton40717
Williamson3996
Whiteside35517
Stephenson3276
Grundy3235
Union32123
Monroe31813
Knox2991
Jefferson28619
Iroquois26311
Morgan2496
Henry2341
Vermilion2342
Cass23111
Bureau2053
Warren1900
Perry1841
Macoupin1793
Franklin1780
Lee1711
Montgomery1707
Marion1560
Effingham1551
Woodford1513
McDonough14315
Christian1424
Saline1322
Jo Daviess1251
Douglas1162
Livingston1152
Logan1120
Jersey1052
Pulaski931
Clark822
Shelby791
Mercer754
Moultrie730
White680
Johnson670
Fayette663
Washington660
Piatt610
Wayne611
Bond603
Jasper597
Carroll564
Menard560
Cumberland552
Hancock531
Gallatin512
Ford492
Lawrence470
Mason470
Greene430
Massac390
Alexander370
Wabash350
De Witt330
Fulton330
Crawford290
Hamilton290
Edgar280
Marshall260
Clay230
Pike210
Scott210
Richland190
Edwards180
Hardin180
Schuyler180
Brown140
Putnam130
Henderson120
Calhoun90
Pope90
Stark70
Out of IL00

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 74328

Reported Deaths: 3041
CountyConfirmedDeaths
Marion15860725
Lake7570275
Elkhart484384
Allen3902163
St. Joseph350081
Hamilton2763104
Vanderburgh196313
Hendricks1887108
Cass17959
Johnson1757118
Porter131639
Clark123347
Tippecanoe121111
Madison97965
LaPorte91130
Howard89065
Kosciusko85212
Bartholomew79347
Marshall78422
Floyd77946
Monroe75630
Delaware73052
Dubois69612
Boone67846
Noble67829
Hancock66038
Vigo65110
Jackson5865
Warrick58130
LaGrange55910
Shelby55327
Grant52630
Dearborn50828
Morgan47634
Clinton4343
Henry38320
Wayne37710
White36910
Montgomery35421
Lawrence34627
Harrison33823
Decatur33732
Putnam2888
Miami2742
Daviess27320
Scott26810
Greene25034
Jasper2432
Franklin24214
DeKalb2324
Gibson2254
Jennings22512
Steuben2103
Ripley2087
Carroll1912
Fayette1897
Perry18612
Starke1787
Orange17124
Posey1710
Wabash1693
Fulton1682
Wells1682
Jefferson1632
Knox1540
Whitley1526
Washington1401
Tipton13810
Spencer1363
Sullivan1261
Huntington1223
Randolph1224
Clay1215
Newton11810
Adams1012
Jay910
Owen901
Pulaski831
Rush804
Fountain742
Brown731
Ohio655
Blackford642
Benton610
Pike530
Switzerland520
Vermillion520
Parke511
Crawford450
Martin450
Union410
Warren221
Unassigned0206