ENKR

Anthem health insurer data breach

Add to my breach check

Made public · 78,800,000 people

What leaked8

Hard to replace

  • Health insurance or Medicare number
  • Mobile number
  • Home or delivery address
  • Email address
  • Employer

Permanent

  • Social Security number
  • Date of birth
  • Full name
  • Health insurance or Medicare numberhealth care identification numbers
  • Mobile numberphone number · type not stated
  • Employeremployment information

To-dos12 · about 3 h in all

  1. Freeze your credit at Equifax, Experian and TransUnionabout 30 minfreeStops: credit in your name (opens in a new tab)
  2. Get an IRS Identity Protection PINabout 20 minStops: tax refund fraud (opens in a new tab)
  3. Place a fraud alert on your credit reportsabout 10 minfreeLimits harm from: credit in your name (opens in a new tab)
  4. Check your credit reports every week, freeabout 20 minfreeHelps you notice: credit in your name (opens in a new tab)
  5. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
7 more
  1. Turn on your carrier's port-out lockabout 5 minLimits harm from: SIM swap
  2. Turn on your carrier's SIM-change lockabout 5 minLimits harm from: SIM swap
  3. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  4. Freeze your NCTUE phone and utility fileabout 10 minfreeLimits harm from: phone or utility account (opens in a new tab)
  5. Check your health insurance statements for care you did not getabout 15 minHelps you notice: medical care in your name (opens in a new tab)
  6. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  7. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: SMS code theft

What happened next10 events

  1. Undetected 2 eventsabout 362 days · show events
  2. Response 1 eventNo individual notice on record · show events
  3. Remedy 1 eventOngoing · show events
  4. Penalty 3 eventsFine $39.5M · show events
  5. Disputes 3 eventsSettled · show events
  1. Anthem agreed to data security and good governance provisions and to stop misrepresenting how it protects personal information
  2. Multistate settlement: 39.5 million USD in penalties and fees
  3. Indictment unsealed in Indianapolis charging a Chinese national and an unnamed co-conspirator with four counts over the Anthem intrusion and three other companies
  4. 16 million USD HIPAA settlement with corrective action, then the largest HIPAA settlement
  5. Offered credit monitoring with identity theft insurance to claimants and fraud resolution services to all, or up to 50 USD instead for people who already had monitoring
5 more
  1. Final approval of a 115 million USD settlement for a class of about 79.15 million people, the largest data breach class settlement in the U.S. at the time per the parties
  2. Class actions consolidated as an MDL in the Northern District of California
  3. Disclosed that hackers broke into its servers and stole Social Security numbers and other personal data; the FBI was contacted
  4. A systems administrator noticed a database query running under his credentials that he had not started
  5. Intrusion began
Company
Anthem
When it happened
Company detected it
Made public
Notice
Leak confirmed
Affected
78,800,000 people · New York attorney general, multistate settlement; HHS put it at almost 79 million

Sources