The HIPAA (the Health Insurance Portability and Accountability Act) has exacted a $1 million penalty from Aetna, U.S. health care insurance company.
Three years ago the details of 5000 individuals were exposed due to deficient protection measures. Login credentials appeared to be unnecessary to access confidential documents on the two web services of the company. Aetna used to keep health plan data available for the members. The data leakage ensued from the low information security level.
Among the breached data there were names, procedure service codes, insurance identification numbers, claim payment amounts, and dates of service.
In 2017 there happened another data breach a few months later when the names of more than 11000 patients who needed HIV medication were revealed.
2017 was marked by another breach in Aetna – the names of 1600 people were exposed in a mailing to plan members with the subject referring to the atrial fibrillation research.
The fine is imposed for these three personal data breaches.
Subscribe to get helpful articles and white papers.
We discuss industry trends and give advice on how to deal with data leaks and cyber incidents.
SearchInform uses four types of cookies as described below. You can decide which categories of cookies you wish to accept to improve your experience on our website. To learn more about the cookies we use on our site, please read our Cookie Policy.
Necessary Cookies
Always active. These cookies are essential to our website working effectively.
Cookies does not collect personal information. You can disable the cookie files
record
on the Internet Settings tab in your browser.
Functional Cookies
These cookies allow SearchInform to provide enhanced functionality and personalization, such as remembering the language you choose to interact with the website.
Performance Cookies
These cookies enable SearchInform to understand what information is the most valuable to you, so we can improve our services and website.
Third-party Cookies
These cookies are created by other resources to allow our website to embed content from other websites, for example, images, ads, and text.
Please enable Functional Cookies
You have disabled the Functional Cookies.
To complete the form and get in touch with us, you need to enable Functional Cookies.
Otherwise the form cannot be sent to us.
Subscribe to our newsletter and receive a bright and useful tutorial Explaining Information Security in 4 steps!
Subscribe to our newsletter and receive case studies in comics!