DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Will state attorneys general sue Anthem to provide more than two years' of credit support services?

Posted on March 1, 2015 by Dissent

There was a time when if an entity offered two years of free credit monitoring/credit restoration services to breach victims, that was considered unusual and commendable. And when the University of Maryland offered five years of credit monitoring services following a breach there, that was really surprising.

But as consumers have often noted, if your SSN and identity information are out there, you’re at risk for life. Criminals can just sit on the data until after the free credit monitoring expires and then begin using it with less risk. While your credit card number can expire or be replaced, your SSN is generally forever.

Could the Anthem breach may become a game-changer on remediation offered to breach victims? A number of state attorneys general are looking into the breach, and according to James Boffetti, Senior Assistant Attorney General  of New Hampshire and Chief of the Consumer Protection and Antitrust Bureau, one issue they’re looking at is “the appropriateness of the remedies that Anthem is offering to people,” he said.

The Union Leader reports that Boffetti

 said company officials have been “very responsive” to investigators. And Anthem has a dedicated website to provide information to affected customers about protecting themselves from identity theft (anthemfacts.com).

But Boffetti said there is “a legitimate concern” about the length of protection Anthem is offering its customers. “I think that’s something that’s going to be discussed quite vigorously as this investigation goes on,” he said.

Although state attorneys general may pursue this aspect of the breach, I do not expect HHS/OCR to really do anything about the mitigation issue. HITECH provides a standard for mitigation, but no specifics when it comes to things like credit monitoring services. And, to date, I don’t think any of OCR’s less than two dozen resolution agreements involved mitigation. Last year, HHS/OCR was sent a complaint about alleged HIPAA and HITECH violations that does include a complaint about failure to adequately mitigate harm and the risk of harm. Whether OCR has done anything with that complaint is unknown to this complainant.

Category: Uncategorized

Post navigation

← OR: Leak of Kitzhaber’s emails, state audit intertwined
Medical College of Wisconsin notifies patients of HIPAA breach after document stolen from doctor's car →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • ConnectWise suspects cyberattack affecting some ScreenConnect customers was state-sponsored
  • Possible ransomware attack disrupts Maine and New Hampshire Covenant Health locations
  • HHS OCR Settles HIPAA Security Rule Investigation of BayCare Health System for $800k and Corrective Action Plan
  • UK: Two NHS trusts hit by cyberattack that exploited Ivanti flaw
  • Update: ALN Medical Management’s Data Breach Total Soars to More than 1.8 Million Patients Affected
  • Russian-linked hackers target UK Defense Ministry while posing as journalists
  • Banks Want SEC to Rescind Cyberattack Disclosure Requirements
  • MathWorks, Creator of MATLAB, Confirms Ransomware Attack
  • Russian hospital programmer gets 14 years for leaking soldier data to Ukraine
  • MSCS board renews contract with PowerSchool while suing them

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Home Pregnancy Test Company Wins Dismissal of Pixel Wiretapping Suit
  • The CCPA emerges as a new legal battleground for web tracking litigation
  • U.S. Spy Agencies Are Getting a One-Stop Shop to Buy Your Most Sensitive Personal Data
  • Period Tracking App Users Win Class Status in Google, Meta Suit
  • AI: the Italian Supervisory Authority fines Luka, the U.S. company behind chatbot “Replika,” 5 Million €
  • D.C. Federal Court Rules Termination of Democrat PCLOB Members Is Unlawful
  • Meta may continue to train AI with user data, German court says

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.