OT: New contender for biggest hack ever

[forty_three]

You Canadians and Europeans who don't have to entrust your health to giant greedy corporations who cut any corner they can to save a few pennies, you may look away.

Massive breach at health care company Anthem Inc.

80 million people affected. Their current enrollment is 37.5 million.

So they decided to never, ever archive anything. Brilliant. If you ever had Anthem insurance, chances are your info is out in the wild now. Happy Thursday.

 

[dash]

Damn, why wouldn't they archive, storage is cheaper than borscht these days.

/I think I may have answered my own question.

 

[forty_three]

Damn, why wouldn't they archive, storage is cheaper than borscht these days.

/I think I may have answered my own question.

Yeah, that's the big question.

Our CEO just asked the head of IT "Give me the number of dead customer records we still store in active databases".

I imagine his seat's about to get mighty toasty. I heard an audible *gulp* on the phone. I guarantee this same conversation is happening in every company in the country right now.

 

[Comeds]

Oh I thought this thread was going to be about comedian and medical advice giver Larry the Cable Guy.

 

[sabresfaninthesouth]

Yeah, that's the big question.

Our CEO just asked the head of IT "Give me the number of dead customer records we still store in active databases".

I imagine his seat's about to get mighty toasty. I heard an audible *gulp* on the phone. I guarantee this same conversation is happening in every company in the country right now.

I'm imagining that conversation at a casket manufacturer.

"Well sir, all of our customers are dead."

 

[dash]

^

Cross him off your list, then.

 

[DevilishWon]

You Canadians and Europeans who don't have to entrust your health to giant greedy corporations who cut any corner they can to save a few pennies, you may look away.Massive breach at health care company Anthem Inc.

80 million people affected. Their current enrollment is 37.5 million.

So they decided to never, ever archive anything. Brilliant. If you ever had Anthem insurance, chances are your info is out in the wild now. Happy Thursday.

Because government IT is so great?

and yes I'm sure Anthem cut corners to save $$$, just sayin'

 

[dash]

Because government IT is so great?

Linky goodness.

B.C. Health Ministry data breach affects millions ? 38,000 will receive letters - Local - Times Colonist

 

[forty_three]

Because government IT is so great?

and yes I'm sure Anthem cut corners to save $$$, just sayin'

Government IT would at the very least followed the "Thou shalt encrypt" rule in HIPAA, which these people did not. In Sweden the health care system is a closed system like the military or power grid. Hospitals and claim processors are not connected to anything but each other. You can't so much as get an email on a hospital system that touches patient info. We could have had that...

I know. I doubt it. But it would be nice.


So, I just got off a call about the types of data stolen in the breach. If you are, or ever have been a BC/BS or Anthem customer, the bad guys got everything that they would need to file a tax return on your behalf (and direct the refund check wherever they want). So if you haven't done yours yet, do it soon. Otherwise when you file, you may find you've already "gotten" your refund. They got your gross salary and # of dependents along with their ages and SSNs.

The only positive is that they can't possibly file 80 millions returns. They probably haven't even figured out the ones they want to use yet.

 

[pixburgher66]

Government IT would at the very least followed the "Thou shalt encrypt" rule in HIPAA, which these people did not. In Sweden the health care system is a closed system like the military or power grid. Hospitals and claim processors are not connected to anything but each other. You can't so much as get an email on a hospital system that touches patient info. We could have had that...

I know. I doubt it. But it would be nice.


So, I just got off a call about the types of data stolen in the breach. If you are, or ever have been a BC/BS or Anthem customer, the bad guys got everything that they would need to file a tax return on your behalf (and direct the refund check wherever they want). So if you haven't done yours yet, do it soon. Otherwise when you file, you may find you've already "gotten" your refund. They got your gross salary and # of dependents along with their ages and SSNs.

The only positive is that they can't possibly file 80 millions returns. They probably haven't even figured out the ones they want to use yet.

*sigh*

 

[forty_three]

*sigh*

You don't know the half of it sister.

This is not even my industry and I gotta deal with it. Our company uses them. Or, well, soon to be "used" them.

 

[sabresfaninthesouth]

Government IT would at the very least followed the "Thou shalt encrypt" rule in HIPAA, which these people did not. In Sweden the health care system is a closed system like the military or power grid. Hospitals and claim processors are not connected to anything but each other. You can't so much as get an email on a hospital system that touches patient info. We could have had that...

I know. I doubt it. But it would be nice.


So, I just got off a call about the types of data stolen in the breach. If you are, or ever have been a BC/BS or Anthem customer, the bad guys got everything that they would need to file a tax return on your behalf (and direct the refund check wherever they want). So if you haven't done yours yet, do it soon. Otherwise when you file, you may find you've already "gotten" your refund. They got your gross salary and # of dependents along with their ages and SSNs.

The only positive is that they can't possibly file 80 millions returns. They probably haven't even figured out the ones they want to use yet.

I don't think it's all of BCBS that's affected. The BCBS name is almost like a franchise. BCBS is its own company that issues some policies, but most are issued by other companies who license the BCBS name.

 

[forty_three]

I don't think it's all of BCBS that's affected. The BCBS name is almost like a franchise. BCBS is its own company that issues some policies, but most are issued by other companies who license the BCBS name.

Right, but there is speculation going on that they consider BC/BS "affiliates" and information may have been shared for business leads...

Might explain the crazy high number.

 

[sabresfaninthesouth]

Right, but there is speculation going on that they consider BC/BS "affiliates" and information may have been shared for business leads...

Might explain the crazy high number.

Ahh...I hadn't seen that part. I know that all of Anthem's companies were affected. Thankfully my insurance (to the best of my knowledge at least) is not Anthem here.

 

[forty_three]

Ahh...I hadn't seen that part. I know that all of Anthem's companies were affected. Thankfully my insurance (to the best of my knowledge at least) is not Anthem here.

This situation is just like whenever something explodes anywhere. So much crazy info going in all directions. So I don't know for sure that is the case. But it makes sense to me.



And the tax returns thing is not being talked about. That's just me looking at what they know was taken and thinking what you can do with it. But then again, I deal with a lot of fraudulent tax stuff. Just what came to my mind. Hopefully the miscreants won't think of it.

 

[dash]

So, the question is, Ukrainians or North Koreans?

 

[forty_three]

So, the question is, Ukrainians or North Koreans?

God damned Ukrainians

 

[forty_three]

Not all companies provide income and tax data to Anthem. Ask your HR department.

That takes you out of the danger for having a fraudulent tax return filed in your name.

Also, Anthem is claiming that Medical codes were not stolen, so no one will know what you had to have removed that time you went to the ER in Vegas.

Name, Address, Phone Number, Email, SSN, Health plan group IDs, and dates of employment including income data if your company sends that stuff.

 

[Comeds]

Not all companies provide income and tax data to Anthem. Ask your HR department.

That takes you out of the danger for having a fraudulent tax return filed in your name.

Also, Anthem is claiming that Medical codes were not stolen, so no one will know what you had to have removed that time you went to the ER in Vegas.

Name, Address, Phone Number, Email, SSN, Health plan group IDs, and dates of employment including income data if your company sends that stuff.

If you are talking about me, I told you that in confidence. If not please disregard. Everyone else too.

 

[DevilishWon]

So, the question is, Ukrainians or North Koreans?

Floridians...South Florida is the capital of fraudulent tax returns