The Indiana attorney general's office is suing health insurance giant WellPoint Inc. for $300,000 for waiting months
to notify customers that their medical records, credit card numbers and other sensitive information may have been exposed
online.
The lawsuit filed Friday in Marion County accuses Indianapolis-based WellPoint of violating a state law that requires businesses
to provide notification of data breaches in a timely manner.
State officials say the personal records were exposed for at least 137 days between last October and March. The suit says
WellPoint learned of the problem Feb. 22 but didn't start notifying customers until June.
WellPoint says it notified customers after analysis identified those potentially affected. The insurer previously said 470,000
people might have been affected.

















IBJ Conversations
2 Comments
Add Comment
Please investigate this unscrupulous business practice.
Of course I was a policyholder who also had my financial info exposed as well...