[prev in list] [next in list] [prev in thread] [next in thread] 

List:       isn
Subject:    [ISN] IRS, Hartford police conducting criminal investigation on Access Health
From:       InfoSec News <alerts () infosecnews ! org>
Date:       2014-06-20 9:44:45
Message-ID: alpine.DEB.2.02.1406200944160.30866 () infosecnews ! org
[Download RAW message or body]

http://ctmirror.org/irs-hartford-police-conducting-criminal-investigation-on-access-health-data-breach/

By Arielle Levin Becker
The CT Mirror
June 19, 2014

The Internal Revenue Service and Hartford police are conducting a criminal 
investigation of the data breach involving information on clients of 
Connecticut's health insurance exchange. But an exchange official said 
Thursday that the cause was most likely a mistake by a call center worker.

The breach occurred two weeks ago after a worker at the exchange's call 
center put notepads containing callers' names, birth dates and Social 
Security numbers into a backpack and left the call center. The backpack 
was later discovered outside a Hartford deli, where the worker had been 
waiting for a ride. He told officials with Maximus, the company that runs 
the call center, that he'd accidentally left without the bag.

It was a policy violation for the worker to take personally identifiable 
information out of the office, said Virginia Lamb, general counsel of 
Access Health CT, the state's exchange.

"He did have his reasons," she told members of the exchange's board during 
a meeting Thursday. "He didn't have at the time a place to lock up his 
data. He put it in his backpack."

[...]



--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/

[prev in list] [next in list] [prev in thread] [next in thread]