Blue Cross Blue Shield of TN data breached

Jan. 20, 2010

From Knoxville News:

CHATTANOOGA – Customers of Chattanooga-based insurer BlueCross
BlueShield of Tennessee slowly are being notified by mail of a potential
breach of their personal information.

This week, BCBS will provide updated data to the public on exactly how
many customers were exposed when 57 hard drives were pilfered in October
from a storage closet at the insurer’s Eastgate Town Center branch, said
company spokeswoman Mary Thompson.

“We’ve reached a critical mass with our analysis of the information, and
this week we think we can update the public,” Thompson said. “We’re
going to be doing a really full breakdown of how many were potentially
exposed.”

Letters are being mailed in batches as the data is being combed over and
the breaches are discovered, Thompson said.

So far, there is no evidence the data has been successfully accessed or
used to harm any customer’s credit, Thompson said. But the insurer, in
the letters, is offering customers free credit monitoring for one year.

The hard drive data is encoded and scrambled in such a fashion, Thompson
said, that it would be difficult for whoever stole the hard drives to
access it. However, the hard drives may include names, insurance ID
numbers, dates of birth, Social Security and information about the
customer’s medical conditions.

In the letter, the company alerted clients via Priority Mail that some
members’ personal information is contained in the hard drives. Company
or group administrators received letters from Tena Roberson, the deputy
general counsel and chief privacy officer for BlueCross.

“The call recordings may have included the member’s name and ID number,”
Roberson wrote. “Additionally, some recordings may have included the
member’s date of birth or Social Security number.”

Sponsored Recommendations

A Cyber Shield for Healthcare: Exploring HHS's $1.3 Billion Security Initiative

Unlock the Future of Healthcare Cybersecurity with Erik Decker, Co-Chair of the HHS 405(d) workgroup! Don't miss this opportunity to gain invaluable knowledge from a seasoned ...

Enhancing Remote Radiology: How Zero Trust Access Revolutionizes Healthcare Connectivity

This content details how a cloud-enabled zero trust architecture ensures high performance, compliance, and scalability, overcoming the limitations of traditional VPN solutions...

Spotlight on Artificial Intelligence

Unlock the potential of AI in our latest series. Discover how AI is revolutionizing clinical decision support, improving workflow efficiency, and transforming medical documentation...

Beyond the VPN: Zero Trust Access for a Healthcare Hybrid Work Environment

This whitepaper explores how a cloud-enabled zero trust architecture ensures secure, least privileged access to applications, meeting regulatory requirements and enhancing user...