IBJNews

WellPoint to pay $100,000 over data breach

Back to TopCommentsE-mailPrintBookmark and Share

Health insurer WellPoint Inc. will pay $100,000 and take other steps after admitting it waited months to notify 32,000 Indiana customers that their Social Security numbers, health records and other personal information might have been exposed online, Indiana Attorney General Greg Zoeller said Tuesday.

The Indianapolis-based parent of Anthem Blue Cross and Blue Shield also agreed to provide up to two years of credit monitoring and identity-theft protection to 32,000 affected Indiana consumers and reimburse them up to $50,000 each for any breach-related losses under the agreement filed last week in Marion Superior Court in Indianapolis, Zoeller said.

Zoeller said a consumer notified WellPoint on Feb. 22 and March 8, 2010, that records containing personal information were potentially accessible. WellPoint immediately secured the site then, but didn't notify customers for three months, violating an Indiana law that requires companies that experience data breaches to notify both their consumers and the attorney general "without unreasonable delay."

"This case should be a teaching moment for all companies that handle consumers' personal data: If you suffer a data breach and private information is inadvertently posted online, then you must notify the Attorney General's Office and consumers promptly. Early warning helps minimize the risk that consumers will fall victim to identity theft," Zoeller said.

WellPoint in June 2010 notified 470,000 customers nationwide of the 137-day security breach that occurred between October 2009 and March 2010. It said then that the problem stemmed from an online program customers could use to track the progress of their applications for coverage.

Zoeller said 645,000 customers eventually were notified of the breach.

The company issued a statement Tuesday saying it has implemented security changes to prevent further breaches from occurring.

"We have received no indication that any information that may have been accessed has been used inappropriately," the statement said.

WellPoint spokeswoman Gene Rodriguez, asked if the company had settled with consumers in any other states, replied, "We are in the process of resolving all issues related to the breach." The company runs Blue Cross Blue Shield plans in 14 states and Unicare plans in several others.

Three years ago, WellPoint offered free credit monitoring after it said personal information for about 128,000 customers in several states had been exposed online. In 2006, backup computer tapes containing the personal information of 200,000 of its members were stolen from a Massachusetts vendor's office.

ADVERTISEMENT

Post a comment to this story

COMMENTS POLICY
We reserve the right to remove any post that we feel is obscene, profane, vulgar, racist, sexually explicit, abusive, or hateful.
 
You are legally responsible for what you post and your anonymity is not guaranteed.
 
Posts that insult, defame, threaten, harass or abuse other readers or people mentioned in IBJ editorial content are also subject to removal. Please respect the privacy of individuals and refrain from posting personal information.
 
No solicitations, spamming or advertisements are allowed. Readers may post links to other informational websites that are relevant to the topic at hand, but please do not link to objectionable material.
 
We may remove messages that are unrelated to the topic, encourage illegal activity, use all capital letters or are unreadable.
 

Messages that are flagged by readers as objectionable will be reviewed and may or may not be removed. Please do not flag a post simply because you disagree with it.

Sponsored by
ADVERTISEMENT

facebook - twitter on Facebook & Twitter

Follow on TwitterFollow IBJ on Facebook:
Follow on TwitterFollow IBJ's Tweets on these topics:
 
Subscribe to IBJ
  1. Looking at the two companies - in spite of their relative size to one another -- Ricker's image is (by all accounts) pretty solid and reputable. Their locations are clean, employees are friendly and the products they offer are reasonably priced. By contrast, BP locations are all over the place and their reputation is poor, especially when you consider this is the same "company" whose disastrous oil spill and their response was nothing short of irresponsible should tell you a lot. The fact you also have people who are experienced in franchising saying their system/strategy is flawed is a good indication that another "spill" has occurred and it's the AM-PM/Ricker's customers/company that are having to deal with it.

  2. Daniel Lilly - Glad to hear about your points and miles. Enjoy Wisconsin and Illinois. You don't care one whit about financial discipline, which is why you will blast the "GOP". Classic liberalism.

  3. Isn't the real reason the terrain? The planners under-estimated the undulating terrain, sink holes, karst features, etc. This portion of the route was flawed from the beginning.

  4. You thought no Indy was bad, how's no fans working out for you? THe IRl No direct competition and still no fans. Hey George Family, spend another billion dollars, that will fix it.

  5. I live downtown Indy and had to be in downtown Chicago for a meeting. In other words, I am the target demographic for this train. It leaves at 6:00-- early but doable. Then I saw it takes 5+ hours. No way. I drove. I'm sure I paid 3 to 5 times as much once you factor in gas, parking, and tolls, but it was reimbursed so not a factor for me. Any business traveler is going to take the option that gets there quickly and reliably... and leisure travelers are going to take the option that has a good schedule and promotional prices (i.e., Megabus). Indy to Chicago is the right distance (too short to fly but takes several hours to drive) that this train could be extremely successful even without subsidies, if they could figure out how to have several frequencies (at least 3x/day) and make the trip in a reasonable amount of time. For those who have never lived on the east coast-- Amtrak is the #1 choice for NY-DC and NY-Boston. They have the Acela service, it runs almost every hour, and it takes you from downtown to downtown. It beats driving and flying hands down. It is too bad that we cannot build something like this in the midwest, at least to connect the bigger cities.

ADVERTISEMENT