Does anyone know why Anthem's clients have not been notified, at all, yet?
I am part of Anthem and I have heard literally nothing directly about this, it's all been through news/tech sites.
I am part of Anthem and I have heard literally nothing directly about this, it's all been through news/tech sites.
subject line:
Important Update from Anthem, Inc.
Safeguarding your personal, financial and medical information is one of our
top priorities, and because of that, we have state-of-the-art information
security systems to protect your data. However, despite our efforts, Anthem
Blue Cross was the target of a very sophisticated external cyber attack.
These attackers gained unauthorized access to Anthem’s IT system and have
obtained personal information from our current and former members such as
their names, birthdays, medical IDs/social security numbers, street
addresses, email addresses and employment information, including income
data. Based on what we know now, there is no evidence that credit card or
medical information (such as claims, test results or diagnostic codes) were
targeted or compromised.
This from a fucking company that uses an online payment system that limits your password to 8 characters.
I already locked my credit and now I'm thinking it's time to freeze my credit so no one can take out new lines without me unfreezing it or increased authentication.
I am learning how this is all working, but if you think about it, it's silly to wait for a breach to have your data locked down.
Ftc has the best info for this sort of thing
If you need to unfreeze (eg. applying for a new credit card or a loan), you need to pay another fee per credit bureau, so you should find out which bureau will be used. You can unfreeze permanently, unfreeze for a short time period, or get an authorization code that you can give to whoever needs to check your credit report.
In addition to reading that, I signed up for one of those credit monitoring/protection sites. The one I chose was TransUnion, but I'm still learning about this stuff. I suggest you look around.
If you do get contacted personally it's a safe bet it's a phishing attack.
Our Company is affected and all our interaction has been through HR. I would contact your HR department.
Anthem will not be emailing individuals, but apparently will be sending a snail-mail packet of information including an offer for credit-monitoring services. And they have been contacting, via email, the benefits/HR people of client companies which used Anthem for group health plans for their employees.
(that all comes via my employer, which has been sending me updates about this)
CC numbers are far less important than any of those identifiers - unlike your SSN or address, they're easy to change. Someone with all that info can just apply for their own CC or loan in your name...
"Members who may have been impacted by the cyber attack against Anthem, should be aware of scam email campaigns targeting current and former Anthem members. These scams, designed to capture personal information (known as "phishing") are designed to appear as if they are from Anthem and the emails include a "click here" link for credit monitoring. These emails are NOT from Anthem."
Today we received a second notice warning of phishing scams that was passed down from Anthem.