A question for other members

[sadoldgirl]

of Anthem (Blue Cross/shield).

After they hacked the insurance's computer files, are we
supposed to let SS know, that our numbers may be
abused? Is Anthem supposed to tell us whose information
is now endangered?
Does anyone here know?
Thanks

[Peacetrain]

1. Good question...

bookmarking this thread

[Electric Monk]

2. Why truncate your subject line? I suggest a quick edit to get better replies.

You currently have:

A question for other members
of Anthem (Blue Cross/shield).

After they hacked the insurance's computer files, are we
supposed to let SS know, that our numbers may be
abused? Is Anthem supposed to tell us whose information
is now endangered?
Does anyone here know?
Thanks

I think this would be better:

A question for other members of Anthem (Blue Cross/shield).

After they hacked the insurance's computer files, are we
supposed to let SS know, that our numbers may be
abused? Is Anthem supposed to tell us whose information
is now endangered?
Does anyone here know?
Thanks

It's a much clearer subject line this way, and that's what the subject line is for

[bigwillq]

3. I clicked on it because it was a "cliffhanger" subject

I probably would not have clicked on it if the subject included "Anthem (Blue Cross/Shield)".

[Electric Monk]

7. and wasted a few seconds of your time, and mine, because of that. nt

[Fred Sanders]

8. Truncating the headline in a post is just a DU'ers way to warn you there is nothing worth reading.

[PoliticAverse]

4. They have a website that has information...

https://www.anthemfacts.com/
and:
Free identity protection service for Anthem Members: https://anthem.allclearid.com/

[trackfan]

5. I have mine through work. They're offering free enrollment in an ID theft protection plan.

I'm not sure if this is a company benefit for our group, or if Anthem is offering this to all subscribers. You should check.

[Maedhros]

6. Portions of the Graham-Leach-Bliley Act (GLBA) require reporting by institutions

that are victims of a data breach, as do portions of other Federal and State laws.

This is a decent summary:

http://www.datasecuritylawjournal.com/2012/05/06/federal-data-breach-notification-laws/

Examples of federal laws that require data breach notification are two laws governing the health care industry – the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). Together, these laws require “covered entities” and many of their service providers to maintain administrative, technical, and physical safeguards to ensure the confidentiality, integrity, and availability of “protected health information” (commonly referred to as “PHI”). A covered entity is a health plan, a health clearinghouse, or a health care provider who transmits health information.

If there is a breach, the covered entity must notify the individuals whose information has been accessed (and law enforcement) without unreasonable delay and no later than 60 days after the breach was discovered. (The law also requires notification to the media in cases where the breach affects more than 500 individuals). Whether there is a breach that triggers the duty to notify depends on whether, with some exceptions, there was an impermissible use or disclosure that compromises the security or privacy of the PHI such that the use or disclosure poses a significant risk of financial, reputational, or other harm to the affected individual. The notice must state what occurred, what type of information was accessed by the breach, what steps individuals should take in response, what is being done to investigate, mitigate, and protect against further harm, and contact information should be provided. HITECH imposes these same notification requirements on the covered entity’s vendors and service providers.

I do not know if these laws require notifying the Social Security Administration...

[sadoldgirl]

9. Thank you all for your help,

sorry if I offended anyone with the title of the OP.
Several million people might be affected by this; thus
I don't think that I asked a useless question.

I will try the anthem site, and then call SS just
in case of necessity.

Have a great weekend.

[DisgustipatedinCA]

10. I wouldn't worry about people wasting time writing posts about wasting time.

That's kind of one of those self-contained asked-and-answered things. It was a good question. Enjoy your weekend.