Posts Tagged breaches

Anthem Agrees to $115 Million Settlement Over Data Breach …

Anthem Inc. agreed to pay $115 million to resolve consumer claims over a 2015 cyber-attack that compromised data on 78.8 million people, marking what attorneys in the case called the largest data-breach settlement in history.

The proposed accord, which would end class-action lawsuits filed in several states, requires approval from a federal judge in San Jose, California. Anthem sells coverage under the Blue Cross and Blue Shield brand in 14 states.

“We are pleased to be putting this litigation behind us, and to be providing additional substantial benefits to individuals whose data was or may have been involved in the cyber-attack and who will now be members of the settlement class,” the Indianapolis-based company said Friday in a statement.

Anthem didn’t admit any wrongdoing in the settlement.

The company said in February 2015 that hackers obtained data on tens of millions of current and former customers and employees that led to a probe by the Federal Bureau of Investigation. The information compromised included names, birthdates, Social Security numbers, medical IDs, street and e-mail addresses and employee data, including income, Anthem said at the time.

Alternative Compensation

As part of the proposed settlement, $15 million would be set aside to pay for out-of-pocket expenses incurred as a result of the data breach.

The proposal filed Friday would require Anthem to establish a fund to buy at least two years of credit monitoring services for the class to help protect them from fraud.

For individual class members who already have their own credit-monitoring services and don’t want to enroll in the settlement’s plan, the settlement provides alternative compensation of as much as $50 per class member.

The plan also requires Anthem to spend an undisclosed amount to help protect members’ personal information over the next three years.

In 2015, after the breach was made public, Anthem established a website, anthemfacts.com, where people affected by the breach could sign up for two years of credit monitoring.

The case is In re Anthem Inc. Data Breach Litigation, 5:15-md-02617, U.S. District Court, Northern District of California (San Jose)

    Article source: https://www.bloomberg.com/news/articles/2017-06-23/anthem-reaches-115-mln-settlement-in-massive-data-breach-case

    ,

    No Comments

    Anthem Agrees to $115 Million Settlement Over Data Breach …

    Anthem Inc. agreed to pay $115 million to resolve consumer claims over a 2015 cyber-attack that compromised data on 78.8 million people, marking what attorneys in the case called the largest data-breach settlement in history.

    The proposed accord, which would end class-action lawsuits filed in several states, requires approval from a federal judge in San Jose, California. Anthem sells coverage under the Blue Cross and Blue Shield brand in 14 states.

    “We are pleased to be putting this litigation behind us, and to be providing additional substantial benefits to individuals whose data was or may have been involved in the cyber-attack and who will now be members of the settlement class,” the Indianapolis-based company said Friday in a statement.

    Anthem didn’t admit any wrongdoing in the settlement.

    The company said in February 2015 that hackers obtained data on tens of millions of current and former customers and employees that led to a probe by the Federal Bureau of Investigation. The information compromised included names, birthdates, Social Security numbers, medical IDs, street and e-mail addresses and employee data, including income, Anthem said at the time.

    Alternative Compensation

    As part of the proposed settlement, $15 million would be set aside to pay for out-of-pocket expenses incurred as a result of the data breach.

    The proposal filed Friday would require Anthem to establish a fund to buy at least two years of credit monitoring services for the class to help protect them from fraud.

    For individual class members who already have their own credit-monitoring services and don’t want to enroll in the settlement’s plan, the settlement provides alternative compensation of as much as $50 per class member.

    The plan also requires Anthem to spend an undisclosed amount to help protect members’ personal information over the next three years.

    In 2015, after the breach was made public, Anthem established a website, anthemfacts.com, where people affected by the breach could sign up for two years of credit monitoring.

    The case is In re Anthem Inc. Data Breach Litigation, 5:15-md-02617, U.S. District Court, Northern District of California (San Jose)

      Article source: https://www.bloomberg.com/news/articles/2017-06-23/anthem-reaches-115-mln-settlement-in-massive-data-breach-case

      ,

      No Comments

      Number of Data Breaches Increased by 1.8% in 2016

      Despite the number of data breaches still going up, there are some positive news as well. New research indicates the average cost per data breach is going down, which is a positive development. Unfortunately, this change can mainly be attributed to the US Dollar surging in value, rather than companies getting better at protecting their data. There is still a lot of work to be done, but it is good to see some form of a silver lining at least.

      Data Breach Costs Are Down, Attacks Are Up

      Every type of research associated with online security is a mixed bag these days. On the positive side, the average costs of data breaches have decreased by 11.4% in 2016. This is good news for companies suffering from data breaches, even though the average cost still hovers around $3.6m. The bad news is how the number of data breaches increased by 1.8% in the same year.

      All of these numbers tell us two different things. First of all, companies are getting worse at keeping sensitive information safe. It was already quite bad in the years prior, but with more attacks taking place, it is evident there is little focus on improving countermeasures. That situation will need to be addressed sooner rather than later. The last thing we need is more successful data breaches, yet companies remain unwilling to do much about it for now.

      Second, it goes to show companies continue to underestimate the financial repercussions caused by a data breach. If the US Dollar wouldn’t have been on a strong run last year, the average cost would not have gone down either. Even so, suffering $3.6m in losses for a data breach is still a lot of money. It seems corporations are more than willing to make this financial hit and move on with their business. That is quite a troubling development, as no one should feel even remotely comfortable paying $3.6m for something they could have easily prevented.

      The new findings, presented by IBM Security’s Peter Allor, do not bode well for the future of data breaches. US residents have a 25% chance to become the victim of a data breach between now and 2019. That is not something to look forward to under any circumstance. Moreover, it appears victims have a higher chance to be caught in a recurring data breach later on, which only makes things worse.

      What is most remarkable about these new findings is how a proactive approach by companies can reduce costs even further. More specifically, undertaking action within 100 days after a data breach reduces costs by as much as 26%. It should never take over three months to successfully identify a data breach, but that is something we have to live with for the time being. Proper solutions need to be implemented, that much is evident.

      As far as data breaches go, successful hacking attempts and human error are the two most common causes. System “glitches” are often exploited successfully as well, which is quite troublesome. IT infrastructure all over the world are in dire need of a major overhaul, yet doing so takes a lot of time and money. It seems evident a lot of corporations will not create a budget to take these steps anytime soon.

      If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

      Article source: https://themerkle.com/number-of-data-breaches-increased-by-1-8-in-2016/

      ,

      No Comments

      Anthem Agrees to $115 Million Settlement Over Data Breach

      Anthem Inc. agreed to pay $115 million to resolve consumer claims over a 2015 cyber-attack that compromised data on 78.8 million people, marking what attorneys in the case called the largest data-breach settlement in history.

      The proposed accord, which would end class-action lawsuits filed in several states, requires approval from a federal judge in San Jose, California. Anthem sells coverage under the Blue Cross and Blue Shield brand in 14 states.

      “We are pleased to be putting this litigation behind us, and to be providing additional substantial benefits to individuals whose data was or may have been involved in the cyber-attack and who will now be members of the settlement class,” the Indianapolis-based company said Friday in a statement.

      Anthem didn’t admit any wrongdoing in the settlement.

      The company said in February 2015 that hackers obtained data on tens of millions of current and former customers and employees that led to a probe by the Federal Bureau of Investigation. The information compromised included names, birthdates, Social Security numbers, medical IDs, street and e-mail addresses and employee data, including income, Anthem said at the time.

      Alternative Compensation

      As part of the proposed settlement, $15 million would be set aside to pay for out-of-pocket expenses incurred as a result of the data breach.

      The proposal filed Friday would require Anthem to establish a fund to buy at least two years of credit monitoring services for the class to help protect them from fraud.

      For individual class members who already have their own credit-monitoring services and don’t want to enroll in the settlement’s plan, the settlement provides alternative compensation of as much as $50 per class member.

      The plan also requires Anthem to spend an undisclosed amount to help protect members’ personal information over the next three years.

      In 2015, after the breach was made public, Anthem established a website, anthemfacts.com, where people affected by the breach could sign up for two years of credit monitoring.

      The case is In re Anthem Inc. Data Breach Litigation, 5:15-md-02617, U.S. District Court, Northern District of California (San Jose)

        Article source: https://www.bloomberg.com/news/articles/2017-06-23/anthem-reaches-115-mln-settlement-in-massive-data-breach-case

        ,

        No Comments

        Local hospital reports data breach – WPSD Local 6: Your news …

        CARBONDALE, IL –

        Southern Illinois Healthcare (SIH) says they are dealing with a data breach.

        They say due to a problem with a company called Experian Health, information on 600 patients was sent to a different medical facility instead of SIH. Experian Health is the company SIH uses to verify patients’ health insurance.

        Experian Health says a technical error caused by a server migration project incorrectly sent the information between February 13 and March 13, 2017.

        Experian Health notified SIH of the problem on April 28. SIH says the data might include: name; date of birth; gender; address; Medicare ID/HIC number or Member ID number for non-Medicare patients; payer/insurance company name; group policy number; group number; and/or Medicaid case number.

        Since the information was sent to another medical facility, workers at SIH believe that data is still protected by HIPPA. They are providing free credit repair and monitoring services to those patients just in case.

        Patients affected by this may call 855-259-6436. Click here for more information.

        Here is a copy of the letter SIH sent to patients:

        Article source: http://www.wpsdlocal6.com/story/35737744/local-hospital-reports-data-breach

        ,

        No Comments

        Aetna: Data breach exposed health info on 1,700 Ohioans

        About 1,700 Ohioans who have health coverage with Aetna have had some of their information exposed in a breach, the insurer said Friday.

        Aetna said the information that was exposed generally includes first name, last name, their Aetna member identification number, provider information, claim payment amount, and, in some cases, procedure and service codes and dates of services.

        There are no instances of Social Security numbers or bank or credit-card information being involved.

        Aetna is sending letters to those affected and providing a toll-free number for individuals to call with questions.

        On April 27, Aetna began investigating a potential security issue involving two computer services that display documents to members and other intended recipients. On May 10, the insurer determined a breach had occurred, and the company completed its review of the affected documents on June 9.

        Aetna said it has taken steps to block the exposure of the information, and the company said it not aware of any misuse of the information.

        [email protected]

        Article source: http://www.dispatch.com/news/20170623/aetna-data-breach-exposed-health-info-on-1700-ohioans

        ,

        No Comments

        BREAKING: Anthem Inks Record $115M Deal Over Massive Data Breach

        Law360, Los Angeles (June 23, 2017, 4:53 PM EDT) — Anthem Inc. has agreed to a deal valued at $115 million to end litigation over a massive 2015 data breach, creating a pool of funds to provide credit protection and reimbursement for customers and up to $38 million in attorneys’ fees in the largest-ever data breach settlement, class attorneys said Friday.

        Under the deal, Anthem will provide the nearly 80 million victims of the data breach with two years of credit monitoring, cover customers’ out-of-pocket expenses stemming from the breach, and pay cash compensation to customers…

        Article source: https://www.law360.com/articles/938080/breaking-anthem-inks-record-115m-deal-over-massive-data-breach

        ,

        No Comments

        Local hospital reports data breach

        CARBONDALE, IL –

        Southern Illinois Healthcare (SIH) says they are dealing with a data breach.

        They say due to a problem with a company called Experian Health, information on 600 patients was sent to a different medical facility instead of SIH. Experian Health is the company SIH uses to verify patients’ health insurance.

        Experian Health says a technical error caused by a server migration project incorrectly sent the information between February 13 and March 13, 2017.

        Experian Health notified SIH of the problem on April 28. SIH says the data might include: name; date of birth; gender; address; Medicare ID/HIC number or Member ID number for non-Medicare patients; payer/insurance company name; group policy number; group number; and/or Medicaid case number.

        Since the information was sent to another medical facility, workers at SIH believe that data is still protected by HIPPA. They are providing free credit repair and monitoring services to those patients just in case.

        Patients affected by this may call 855-259-6436. Click here for more information.

        Here is a copy of the letter SIH sent to patients:

        Article source: http://www.wpsdlocal6.com/story/35737744/local-hospital-reports-data-breach

        ,

        No Comments

        Aetna: Data breach exposed health info on 1700 Ohioans

        About 1,700 Ohioans who have health coverage with Aetna have had some of their information exposed in a breach, the insurer said Friday.

        Aetna said the information that was exposed generally includes first name, last name, their Aetna member identification number, provider information, claim payment amount, and, in some cases, procedure and service codes and dates of services.

        There are no instances of Social Security numbers or bank or credit-card information being involved.

        Aetna is sending letters to those affected and providing a toll-free number for individuals to call with questions.

        On April 27, Aetna began investigating a potential security issue involving two computer services that display documents to members and other intended recipients. On May 10, the insurer determined a breach had occurred, and the company completed its review of the affected documents on June 9.

        Aetna said it has taken steps to block the exposure of the information, and the company said it not aware of any misuse of the information.

        [email protected]

         

         

        Article source: http://www.dispatch.com/news/20170623/aetna-data-breach-exposed-health-info-on-1700-ohioans

        ,

        No Comments

        One Million Affected By WSU Data Breach | Northwest Public Radio

        Names and personal data of about a million people may have been compromised in a burglary involving Washington State University property.

        A WSU hard drive was stolen from a locked storage unit in Olympia in April.

        It held research data the university compiled for school districts, the Census Bureau, the Washington Legislature, and other agencies.

        WSU spokesperson Phil Weiler says the university has identified the people who could be affected.

        “The challenge is an individual may not know that his or her data was on that hard drive because they’re not aware that the school district might be doing these multi-year studies, so that’s why it’s important for us to be able to send letters to individuals.”

        Weiler says WSU is offering those affected free credit monitoring for one year, and has set up a hotline for people to call for more info.

        He says at this point there is no reason to believe the burglar has accessed the information on the hard drive.

        Police have no suspects at this time.

        Copyright 2017 KUOW

        Article source: http://nwpr.org/post/one-million-affected-wsu-data-breach

        ,

        No Comments