Anthem Reaches $16M Data Breach Settlement

Posted: Updated:
INDIANAPOLIS -

Indianapolis-based Anthem Inc. (NYSE: ANTM) has reached a settlement related to what the U.S. Department of Health and Human Services calls the largest health data breach in U.S. history. The HHS says the company has agreed to pay $16 million and take "substantial corrective action" to settle potential violations of the Health Insurance Portability and Accountability Act.

The settlement is also the largest HIPAA-related payment to the HHS Office for Civil Rights in history. The previous record was $5.5 million paid to the OCR in 2016.

The HHS says the data breach is the result of cyber-attacks that exposed the electronic protected health information of nearly 79 million people, including names, social security numbers, medical identification numbers, addresses, and more. The OCR conducted an investigation of the incident and made several findings saying that Anthem:

  • Failed to conduct an enterprise-wide risk analysis
  • Had insufficient procedures to regularly review information system activity
  • Failed to identify and respond to suspected or known security incidents
  • Failed to implement adequate minimum access controls to prevent the cyber-attackers from accessing sensitive ePHI, beginning as early as February 18, 2014.

"The largest health data breach in U.S. history fully merits the largest HIPAA settlement in history," OCR Director Roger Severino said in a news release. "Unfortunately, Anthem failed to implement appropriate measures for detecting hackers who had gained access to their system to harvest passwords and steal people’s private information. We know that large health care entities are attractive targets for hackers, which is why they are expected to have strong password policies and to monitor and respond to security incidents in a timely fashion or risk enforcement by OCR."

In addition to the $16 million payment, Anthem has agreed to establish a "robust corrective action plan" to comply with HIPAA rules. You can learn more about the case and the settlement by clicking here.

  • Perspectives

    • Want to Build a Culture of Experimentation? Embrace Failure First

      Failure. It’s not something all business leaders are comfortable embracing, yet it’s integral to success. That’s because failure signals attempt - and without those undertakings, none of the world’s greatest inventions would have ever come to fruition. So when company leaders decide they want to cultivate a culture of experimentation within their company, it’s important they understand the value of embracing failure. It’s not only a great way to...

    More

Subscribe

Name:
Company Name:
Email:
Confirm Email:
HTML
INside Edge
Morning Briefing
BigWigs & New Gigs
Life Sciences Indiana
Indiana Connections
INPower
Subscribe
Unsubscribe

Events



  • Most Popular Stories

    • Scotty's Brewhouse Files For Bankruptcy

      Indianapolis-based Scotty's Brewhouse has filed for Chapter 11 bankruptcy protection. The company says the decision was "driven largely by the challenges of some specific locations and was necessary because of the way the company was structured corporately." As a result of the deal, Scotty's will close four of its restaurants by the end of the year. In a news release provided to Inside INdiana Business...

    • Shelbyville to Debut Giant Sculpture

      Officials in Shelbyville will this evening unveil a new art installation in the city's downtown. The city says the four-story, $150,000 sculpture known as Blue River - Wind, Rain and Water anchors its ongoing commitment to public art.

    • Churubusco Company Acquired

      Cleveland-based Lincoln Electric Holdings Inc. (Nasdaq: LECO) has announced the acquisitions of two companies, one of which is located in Whitley County. Financial terms of the deal for Churubusco-based Pro Systems LLC and Coldwater Machine Company LLC in Ohio are not being disclosed.

    • Scotty's Brewhouse Founder Takes New Role

      Scott Wise will fill a familiar role in his new job, to open more Scotty's Brewhouse locations across the midwest. The Yorktown, Indiana native has joined Luke Family Brands as Vice President of restaurant operations.  Wise will now help to open a minimum of 10 Scotty's Brewhouses in college towns in major midwest cities. 

    • Work Begins on 16 Tech's First Building

      16 Tech developers have officially broken ground on the innovation district's first building, marking the beginning of an ambitious 10-year project. The $30 million Advanced Research and Innovation building is fully-leased and will anchor the 60-acre development. The facility, which will house the Indiana Biosciences Research Institute, Central Indiana Corporate Partnership and Indiana University School of Medicine researchers, is set to be complete in mid-2020.