Anthem Data Breach
UPDATE: LACERA ANTHEM BLUE CROSS MEMBERS
Anthem wants to keep its members informed about their actions in response to the cyber attack. If you are a current or former Anthem subscriber who already provided consent for e-mail communication, you will receive an email concerning 24 months of complimentary identity protection and credit-monitoring services. Anthem is required to send this email because of state laws concerning breach notifications. The subject line of the email will be "Important Message from Anthem, Inc.," and it will direct members to visit AnthemFacts.com to sign up for credit protection services. The email will not ask for personal information. We encourage you to read the email and visit AnthemFacts.com to sign up for the services provided by Anthem. (2-19-15)
- Anthem has created a website — anthemfacts.com and a hotline 877-263-7995 for more information. In addition, there is a Frequently Asked Questions (FAQs) web page that further explains the cyber attack, which can be viewed here: anthemfacts.com/faq.
- Updated Anthem Cyber Attack FAQs (2-11-15)
Attention: LACERA Anthem Blue Cross Members
You may have seen in the news recently that Anthem, the parent company of one of our retiree health insurance providers, was the victim of a highly sophisticated cyber attack. At this point, we do not know if any LACERA members have been affected. We have been in close contact with Anthem, and will make our members aware of any further developments as they become available by updating our website.
Anthem informed us that its member data was indeed accessed, and LACERA is working closely with them to better understand the impact on our members. Here is what we do know:
- Once Anthem determined it was the victim of a cyber attack, it immediately notified federal law enforcement officials and shared this knowledge with the HITRUST C3 (Cyber Threat Intelligence and Incident Coordination Center).
- Anthem's Information Security has worked to eliminate any further vulnerability, and continues to secure all of its data.
- Anthem immediately began a forensic IT investigation to determine the number of impacted members and to identify the type of information accessed. This investigation is still ongoing.
- The information accessed includes member names, member health ID numbers/Social Security numbers, dates of birth, addresses, telephone numbers, email addresses, and employment information including income data. Social Security numbers were included in only a small percentage of affected members.
- Anthem is still working to determine which members' Social Security numbers were accessed.
- Anthem's investigation to date shows that no credit card or confidential health information was accessed.
- Anthem advised us there is no indication at this time that any of LACERA's members' personal information has been misused.
- All impacted Anthem members will be enrolled in identity repair services. In addition, impacted members will be provided information on how to enroll in free credit monitoring.
LACERA is continuing to work closely with Anthem to better understand the cyber attack and the impact on our members. Again, LACERA will continue to keep our members updated on Anthem's ongoing investigation as more information is shared with us.