[Dataloss] IN: WellPoint Customer Information Exposed

[Michael Hill, CITRMS]

Here we go again.  Doling out credit monitoring when there's the real 
possibility of WellPoint customers becoming medical identity theft victims. 
Again, I ask what is it about someone using your medical information that 
would ever make a company think that it would be detected by credit 
monitoring?








Michael Hill
Certified Identity Theft Risk Management Specialist
404-216-3751


"If You Think You're Not At Risk, Think Again!"


NOTICE:
This email and any attachment to it is confidential and protected by law and 
intended for the use of the individual(s) or entity named on the email. 
This information and all email information from the sender is not legal 
advice nor legal representation and should not be construed as legal advice 
nor legal representation. Check with your attorney in your State for legal 
advice. If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination or distribution of this communication 
is prohibited.  If you have received this communication in error, please 
notify the sender via return email and delete it completely from your email 
system.  If you have printed a copy of the email, please destroy it 
immediately.



----- Original Message ----- 
From: "lyger" <lyger at attrition.org>
To: <dataloss at attrition.org>
Sent: Tuesday, April 08, 2008 6:40 PM
Subject: [Dataloss] IN: WellPoint Customer Information Exposed


>
> http://www.chron.com/disp/story.mpl/ap/fn/5684827.html
>
> Personal information that may have included Social Security numbers and
> pharmacy or medical data for about 128,000 WellPoint Inc. customers in
> several states was exposed online over the past year, the health insurer
> said Tuesday.
>
> WellPoint, which has had other data security issues in the past, recently
> learned about the problem, fixed it and is notifying customers,
> spokeswoman Shannon Troughton said. The nation's largest health insurer by
> membership is offering free credit-monitoring services for those
> customers, but has received no reports of identity theft or credit fraud.
>
> The latest security lapse stems from two servers maintained by an outside
> vendor that Troughton declined to identify. The vendor specializes in data
> management.
>
> [...]
> _______________________________________________
> Dataloss Mailing List (dataloss at attrition.org)
> http://attrition.org/dataloss
>
> Tenable Network Security offers data leakage and compliance monitoring
> solutions for large and small networks. Scan your network and monitor your
> traffic to find the data needing protection before it leaks out!
> http://www.tenablesecurity.com/products/compliance.shtml
>