IRS, Hartford police conducting criminal investigation on Access Health data breach

[InfoSec News <alerts () infosecnews org>]

http://ctmirror.org/irs-hartford-police-conducting-criminal-investigation-on-access-health-data-breach/

By Arielle Levin Becker
The CT Mirror
June 19, 2014

The Internal Revenue Service and Hartford police are conducting a criminal 
investigation of the data breach involving information on clients of 
Connecticut’s health insurance exchange. But an exchange official said 
Thursday that the cause was most likely a mistake by a call center worker.

The breach occurred two weeks ago after a worker at the exchange’s call 
center put notepads containing callers’ names, birth dates and Social 
Security numbers into a backpack and left the call center. The backpack 
was later discovered outside a Hartford deli, where the worker had been 
waiting for a ride. He told officials with Maximus, the company that runs 
the call center, that he’d accidentally left without the bag.

It was a policy violation for the worker to take personally identifiable 
information out of the office, said Virginia Lamb, general counsel of 
Access Health CT, the state's exchange.

“He did have his reasons,” she told members of the exchange’s board during 
a meeting Thursday. “He didn’t have at the time a place to lock up his 
data. He put it in his backpack.”

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/