CareFirst, Blue Cross Blue Shield, announced on Wednesday, that the health insurer suffered a cyber-attack in June. It revealed that data breach could impact up to 1.1 million CareFirst’s existing and former customers’ information. The health insurer’s headquarter is situated in Maryland, servicing areas - Washington D.C and Virginia.
The health insurer disclosed about the cyber-attack on Wednesday, which had taken in the month of June. The insurer reported hackers have gained access to customer names, email address, and birthdates, but they didn’t accessed their sensitive information like credit card information, social security number, and medical claims.
It is the third major cyber-attack on U.S. health company back up plan this year, impending as programmers progressively target social insurance and protection associations for medicinal related information, which can be sold for substantial entireties on mystery online commercial centers. Late attacks on safety net providers - Anthem and Premera Blue Cross influenced a huge number of individuals the nation over, including some CareFirst clients.
Cybersecurity and security experts said that while the CareFirst assault postures to a lesser degree a danger than information breaks including more delicate information, for example, financial record data or Social Security numbers, regardless it opens enough to put consumers at danger in so-called- phishing endeavors or other frauds.
The company said that it had first investigated, which data on customers was accessed by hackers nearly a month ago, i.e., On April 21, during the eve of review of its systems by cybersecurity firm Mandiant. CareFirst didn’t disclose the attack discovery until now, so that it could accomplish its investigation purpose.
The FBI said it is investigating the intrusion that CareFirst is offering affected existing and former customers with two years of free identity-theft protection and credit monitoring services. An FBI Spokesperson revealed in an e-mailed statement to media that the Bureau is investigating with the victim company to determine the nature and scope of the cyber-attack incident.
Founder of cybersecurity firm -TrustedSEC, Dave Kennedy said that they can look forward to more health-care industry breaches that are to be disclosed, and there are most likely a whole lot of other company locations, which are just discovering cyber-attacks in their premises.