Anthem pays OCR $16 million in HIPAA settlement 

Oct 16, 2018 - 02:26 PM
Anthem

The Department of Health and Human Services’ Officer for Civil Rights yesterday announced that Anthem has agreed to pay $16 million and take corrective action to settle potential violations of the Health Insurance Portability and Accountability Act after a series of cyberattacks led to the largest U.S. health data breach in history and exposed the electronic protected health information of nearly 79 million people. 

“Unfortunately, Anthem failed to implement appropriate measures for detecting hackers who had gained access to their system to harvest passwords and steal people’s private information,” said OCR Director Roger Severino. 

In addition to the impermissible disclosure of ePHI, OCR’s investigation revealed that Anthem failed to conduct an enterprise-wide risk analysis; had insufficient procedures to regularly review information system activity; failed to identify and respond to suspected or known security incidents; and failed to implement adequate minimum access controls to prevent the cyber-attackers from accessing sensitive ePHI, beginning as early as February 2014.
 

Related News Articles

Headline
CISA, FDA warn of vulnerabilities in Contec patient monitors 
The Cybersecurity and Infrastructure Security Agency and Food and Drug Administration Jan. 30 released notices warning of vulnerabilities found in the Contec…
Headline
Advisory details ransomware attacks on SimpleHelp remote access software
The AHA yesterday released an advisory alerting members that the association and the Health Information Sharing and Analysis Center have identified attempted…
Headline
Reports: Change Healthcare cyberattack exposed data of 190 million people
The ransomware attack last year against UnitedHealth Group subsidiary Change Healthcare exposed data of more than 190 million people — up from previous reports…
Headline
AHA supports policy, technical changes to Medicare Advantage, Part D for 2026
The AHA Jan. 27 voiced support for the Centers for Medicare & Medicaid Services proposed rule on policy and technical changes to Medicare Advantage and…
Headline
Advisory details how cyber actors deployed vulnerabilities in attack on Ivanti cloud products 
The Cybersecurity and Infrastructure Security Agency and FBI Jan. 22 released an advisory explaining how cyberthreat actors “chained” vulnerabilities —…
Headline
CMS says record 24.2 million enrolled in Marketplace coverage for 2025 
The Centers for Medicare & Medicaid Services Jan. 17 announced a record 24.2 million consumers selected health coverage through the Health Insurance…