Posts

WELS Benefit Plans Office

Anthem Blue Cross Blue Shield Cyber Attack

/in

As widely reported, Anthem, Inc. was the target of a sophisticated external cyber attack that occurred in December 2014 and January 2015. Anthem Blue Cross Blue Shield is the claims administrator for the WELS VEBA Group Health Care Plan. Anthem has informed us that WELS VEBA members since 2004 may be at risk of unauthorized access to their confidential data.

Current and former WELS VEBA members are encouraged to visit Anthem’s cyber attack website at www.anthemfacts.com or call Anthem’s hotline at 877-263-7995 for up-to-date information on the attack and its impact on members, as well as instructions on how to utilize free credit monitoring and identify theft repair services.

The pages below provide updates sent to WELS VEBA members and calling bodies based on information provided by Anthem:

WELS Benefit Plans Office

Credit monitoring services for affected members

/in

Anthem Blue Cross Blue Shield has provided information on how to immediately enroll in credit protection services to all members who are potentially impacted by the recent cyber attack on Anthem’s systems.

Starting Friday, February 13, 2015 at 2 p.m. ET/11 a.m. PT, current and former Anthem members can visit www.anthemfacts.com to learn more about credit monitoring and identity theft repair services provided by AllClear ID, a leading and trusted identity protection provider. All services are available for two years. Details of the services, and instructions on how to enroll, are listed below:

  • Identity theft repair services are available to Anthem members who feel they have experienced fraud. For members who have been impacted by the cyber attack, these services are automatically available and do not require enrollment. Please visit www.anthemfacts.com to learn how to access these services. Members may access identity repair services by calling 877-263-7995.
  • Credit monitoring services require a member to actively enroll because the member must provide their personal information and consent to have their credit monitored. Members can enroll at any time during the 24 month coverage period, and can learn how to sign up at www.anthemfacts.com. Members who do not have access to the Internet may call 877-263-7995 for assistance.
  • The free identity protection services provided by Anthem include two years of:
    • Identity Repair Assistance: Should a member experience fraud, an investigator will do the work to recover financial losses, restore the member’s credit, and ensure the member’s identity is returned to its proper condition. This assistance will cover any fraud that has occurred since the incident first began.
    • Credit Monitoring: At no cost, members may also enroll in additional protections, including credit monitoring. Credit monitoring alerts consumers when banks and creditors use their identity to open new credit accounts.
    • Child Identity Protection: Child-specific identity protection services will also be offered to any members with children insured through their Anthem plan.
    • Identity theft insurance: For individuals who enroll, the company has arranged for $1,000,000 in identity theft insurance, where allowed by law.
    • Identity theft monitoring/fraud detection: For members who enroll, data such as credit card numbers, social security numbers and emails will be scanned against aggregated data sources maintained by top security researchers that contain stolen and compromised individual data, in order to look for any indication that the members’ data has been compromised.
    • Phone Alerts: Individuals who register for this service and provide their contact information will receive an alert when there is a notification from a credit bureau, or when it appears from identity theft monitoring activities that the individual’s identity may be compromised.
      Members who have provided e-mails to Anthem and have opted in to receiving communications may receive an e-mail directing them to visit www.anthemfacts.com to sign up for services. This e-mail is scheduled to be distributed the week of Feb. 16. This email, sent due to state notification requirements, will not ask for personal information and will not contain a link to any websites other than www.anthemfacts.com.

Spanish-speaking members may access information at www.antheminforma.com, or receive assistance in Spanish at 877-263-7995.

Phone lines will be open from 9 a.m. to 9 p.m. ET Monday through Saturday.

Please be assured that we continue to work closely with Anthem to better understand the cyber attack and the impact on our members. We will keep you updated on Anthem’s investigation and any important developments.

In Christ’s Service,

Mr. Joshua Peterman

Director of WELS Benefit Plans

WELS Benefit Plans Office

Initial Anthem announcement

/in

We are informing all WELS VEBA members and former members that we are aware Anthem, Inc., the claims administrator for WELS VEBA, is the victim of a highly sophisticated cyber attack. Anthem has informed us that its member data was accessed, and could include that of our current and former members.

We are working closely with Anthem to better understand the impact on our members. Here is what we do know:

  • Once Anthem determined it was the victim of a sophisticated cyber attack, it immediately notified federal law enforcement officials and shared the indicators of compromise with the HITRUST C3 (Cyber Threat Intelligence and Incident Coordination Center).
  • Anthem’s Information Security has worked to eliminate any further vulnerability and continues to secure all of its data.
  • Anthem immediately began a forensic IT investigation to determine the number of impacted consumers and to identify the type of information accessed. The investigation is still taking place.
  • The information accessed includes member names, member health ID numbers/Social Security numbers, dates of birth, addresses, telephone numbers, e-mail addresses and employment information, including income data. Social
  • Security numbers were included in only a subset of the universe of consumers that were impacted.
  • Anthem is still working to determine which members’ Social Security numbers were accessed.
  • Anthem’s investigation to date shows that no credit card or confidential health information was accessed.
  • Anthem has advised us there is no indication at this time that any of our clients’ personal information has been misused.
  • All impacted Anthem members will be automatically enrolled in identity repair services. In addition, impacted members will be provided information on how to enroll in free credit monitoring.
  • We are continuing to work closely with Anthem to better understand the cyber attack and the impact on our members. Anthem has created a website: www.anthemfacts.com, and a hotline, 1-877-263-7995, for members to call for more information, in addition to a Frequently Asked Questions list that further explains the cyber attack.

We are closely monitoring any developments and will continue to keep you updated on Anthem’s ongoing investigation.

In Christ’s Service,

Mr. Joshua Peterman

Director of WELS Benefit Plans