Anthem Insurance Customers in Madison Face Threat of ID Theft

Connecticut’s attorney general and the state Insurance Department are offering advice to the state’s customers of Anthem Insurance on Thursday after a security breach left customers vulnerable to potential identity theft.

Both current and former insurance enrollees of the company may have been affected by the security breach.

What Seems to Have Been Hacked

Anthem CEO Joseph R. Swedish issued a statement to its customers on its website in which said, in part:

“Anthem was the target of a very sophisticated external cyber attack. These attackers gained unauthorized access to Anthem’s IT system and have obtained personal information from our current and former members such as their names, birthdays, medical IDs/social security numbers, street addresses, email addresses and employment information, including income data.

“Based on what we know now, there is no evidence that credit card or medical information, such as claims, test results or diagnostic codes were targeted or compromised.”

How Secure Was Anthem’s Database?

Regarding Anthem’s security procedures, Swedish said, “Safeguarding your personal, financial and medical information is one of our top priorities, and because of that, we have state-of-the-art information security systems to protect your data. ”

According to an Associated Press report, however, Mark Bower, a vice president of the cyber-security firm Voltage Security said health insurance companies generally have less security than major retail firms have now instituted after major hacking incidents. He said hackers are attracted to insurance companies as they are to any “low-hanging fruit.”

Anthem, based in Indianapolis, is the second-largest health insurance company in the nation, with 37 million customers and a database with information on 80 million people, including former customers, according to the AP report.

Connecticut Officials React

George Jepsen, the attorney general, and the state Department of Consumer Protection have asked Anthem for more information on the security breach. According to a news release from the Attorney General’s Office, ”Jepsen asked that all affected patients in Connecticut be provided with two years of credit monitoring services, identity theft insurance, and reimbursement for the costs associated with placing and lifting security freezes.”

Jepsen said his office opened an investigation into Anthem’s security procedures Wednesday afternoon, immediately after hearing about it.

“This data breach is very troubling,” said Consumer Protection Commissioner Jonathan Harris in the same news release. “Anthem, like all health insurance companies, has access to extremely sensitive health and personal information and therefore has the immense responsibility to protect that information from unlawful disclosure. That there is any vulnerability in the corporation’s record management system is cause for real concern and must be corrected.”

What You Can Do to Protect Yourself

From a separate Connecticut Insurance Department news release:

Anthem has set up a special website – www.anthemfacts.com – to answer customer questions. Customers can also call Anthem’s special toll-free number 877-263-7995. The company will be contacting current and former customers directly affected and will be offering free credit monitoring and identity protection services.

The following is general information from the Department of Consumer Protection regarding identity theft and ways to safeguard your information:

• How to Find Out if You’re an ID Theft Victim
• What to Do If It Happens To You
• Fact sheet – Protect Your Good Name Against Identity Theft
• More identity theft resources

This Consumer Alert will be updated as more details become available.

Anyone with questions or concerns about this or any insurance matter should contact the Connecticut Insurance Department’s Consumer Affairs Unit.