Chinese National Indicted in Anthem Data Breach

Posted: Updated:
(photo courtesy of Anthem) (photo courtesy of Anthem)
INDIANAPOLIS -

A federal grand jury has indicted a Chinese national on charges related to the 2015 data breach of Indianapolis-based Anthem Inc. (NYSE: ANTM). The U.S. Department of Justice says Fujie Wang and other members of a hacking group operating in China used "extremely sophisticated" techniques to hack into the computer networks of Anthem and three other large, though unnamed, businesses in the United States. 

Wang, along with another person being identified as John Doe, are each being charged with one count of conspiracy to commit fraud and related activity in relation to computers and identity theft, one count of conspiracy to commit wire fraud, and two substantive counts of intentional damage to a protected computer.

The indictment says the defendants hacked into the computer networks in February 2014 and installed malware and tools which were used to identify data of interest, including personally identifiable information and confidential business information. The data stolen from Anthem affected more than 78 million people and included names, health identification numbers, Social Security numbers, addresses, and employment information, among others.

"The allegations in the indictment unsealed today outline the activities of a brazen China-based computer hacking group that committed one of the worst data breaches in history," Assistant Attorney General Benczkowski said in a news release. "These defendants allegedly attacked U.S. businesses operating in four distinct industry sectors, and violated the privacy of over 78 million people by stealing their PII. The Department of Justice and our law enforcement partners are committed to protecting PII, and will aggressively prosecute perpetrators of hacking schemes like this, wherever they occur."

The DOJ says the defendants allegedly used techniques including the sending of specially-tailored "spearfishing" emails with embedded hyperlinks. Once a user clicked on one of those links, a file was downloaded that could deploy the malware. The indictment says the defendants would wait for months before taking further action.

"Anthem's cooperation and openness in working with the FBI on the investigation of this sophisticated cyber-attack was imperative in allowing for the identification of these individuals," said FBI Special Agent in Charge Grant Mendenhall. "It should also be noted that the speed with which Anthem initially notified the FBI of the intrusion on their networks was also a key factor in being able to determine who was responsible for the breach and should serve as an example to other organizations that might find themselves in a similar situation."

Anthem would later reach settlement agreements in 2017 and 2018 over the breach, to the tune of more than $130 million. 

  • Perspectives

    • Ahh…Yes! Turning a Hot Mess into a Cool Breeze

      "Problems cannot be solved by the level of thinking that created them," is attributed to Einstein over 75 years ago. This still holds true, particularly in challenging communications. Many people address conflict at the level it was created by rehashing and building more evidence for their ‘side’ of an argument. Repeating a position tends to intensify the separation of people.

    More

Subscribe

Name:
Company Name:
Email:
Confirm Email:
HTML
INside Edge
Morning Briefing
BigWigs & New Gigs
Life Sciences Indiana
Indiana Connections
INPower
Subscribe
Unsubscribe

Events



  • Most Popular Stories

    • Bob Stutz

      New Role For Salesforce Exec

      After three years on the job, Salesforce Marketing Cloud Chief Executive Officer Bob Stutz is moving into a new role. Stutz, who will remain in Indianapolis, is now executive vice president of strategic partners at Salesforce (NYSE: CRM).  Since arriving in Indianapolis, Stutz has overseen the establishment of the company’s regional headquarters in downtown Indianapolis, which included the Salesforce name being placed atop the state’s tallest building.

    • Red Star announced plans to expand and add 18 jobs.

      Larwill Medical Device Maker to Expand, Add Jobs

      A Whitley County-based medical device maker has announced plans to expand its facility in Larwill which should mean new jobs. Red Star Contract Manufacturing Inc. says it will invest $1.6 million in real estate improvements and additional equipment and will create 18 new jobs by 2022. 

    • Purdue Global Now Offers Analytics Degree

      The U.S. Bureau of Labor Statistics reports that jobs in the field of data analysis are projected to grow 26 percent over the next ten years. Acting upon that data, Indianapolis-based Purdue University Global has launched a new Bachelor of Science degree program in analytics. 

    • Regal Beloit is closing in Valparaiso. (photo courtesy; The Times of Northwest Indiana)

      Valpo Bearings Plant to Close, Eliminating 160+ Jobs

      Wisconsin-based Regal Beloit Corp. and the union representing workers have reached an agreement about the closing of a helicopter bearing factory in Valparaiso. According to our partners at The Times of Northwest Indiana, the decision will cost between 160 to 170 workers their jobs. 

    • (image courtesy of The Times of Northwest Indiana)

      U.S. Steel Updates Layoff Notice to State

      Pittsburgh-based U.S. Steel Corp. (NYSE: X) has updated the State of Indiana regarding its previously announced layoffs at the East Chicago Tin Mill. The company says 314, rather than 307, workers will be displaced when the mill is idled this fall.