Anthem, Inc., the parent company of Anthem Blue Cross Blue Shield of Maine, is the victim of a highly-sophisticated cyber attack. Anthem has informed Allen Insurance and Financial that member data was accessed, and information about our clients could be among the data.
We are working closely with Anthem to better understand the impact on its members.
Anthem has created a website – www.anthemfacts.com, and a hotline, 1-877-263-7995, for its members to call for more information, and has shared the following information which further explains the cyber attack.
It is important you read this email completely, including the article below about STEPS YOU MUST TAKE TO ACCESS SERVICES ANTHEM WILL BE OFFERING TO THOSE WHOSE DATA HAS BEEN COMPROMISED.
Here is what we know:
• Once Anthem determined it was the victim of a sophisticated cyber attack, it immediately notified federal law enforcement officials and shared the indicators of compromise with the HITRUST C3 (Cyber Threat Intelligence and Incident Coordination Center).
• Anthem’s Information Security has worked to eliminate any further vulnerability and continues to secure all of its data.
• Anthem immediately began a forensic Information Technology (IT) investigation to determine the number of impacted consumers and to identify the type of information accessed. The investigation is still taking place.
• The information accessed includes member names, member health ID numbers/Social Security numbers, dates of birth, addresses, phone numbers, email addresses and employment information, including income data. Social Security numbers were included in only a subset of the universe of consumers that were impacted.
• Anthem is still working to determine which members’ Social Security numbers were accessed.
• Anthem’s investigation to date shows that no credit card or confidential health information was accessed.
• Anthem has advised us there is no indication at this time that any of our clients’ personal information has been misused.
• All impacted Anthem members will be enrolled in identity repair services. In addition, impacted members will be provided information on how to enroll in free credit monitoring.
We are continuing to work closely with Anthem to better understand the cyber attack and the impact on our clients.
We will continue to keep you updated on Anthem’s ongoing investigation in hopes to find out who committed the attack and why.
FREE SERVICES FROM ANTHEM
All of the following services from Anthem are free. You are automatically enrolled in an identity repair service; the other services require you to call and enroll.
Identity repair: An investigator will help you restore your identity. (Automatic enrollment)
You will be able to enroll in the following services
•Identity Theft Monitoring
•Phone Alerts
•Lost Wallet Protection
•$1 Million in Identity Theft Insurance
•Credit Monitoring (Adults Only)
•ChildScan Monitoring (Children Only)
These services will be available in approximately two weeks.
You must enroll for them to be implemented.
Enrollment will be for one year.
Protect Yourself From Scam Email Campaigns
Anthem Blue Cross and Blue Shield in Maine is not calling members regarding the cyber attack and is not asking for credit card information or social security numbers over the phone.
Consumers should also be aware of scam email campaigns targeting current and former Anthem members. These scams, designed to capture personal information (known as “phishing”) are designed to appear as if they are from Anthem and the emails include a “click here” link for credit monitoring. These emails are NOT from Anthem.
• DO NOT click on any links in email.
• DO NOT reply to the email or reach out to the senders in any way.
• DO NOT supply any information on the website that may open, if you If you have clicked on a link in email.
• DO NOT open any attachments that arrive with email.
This outreach is from scam artists who are trying to trick consumers into sharing personal data. There is no indication that the scam email campaigns are being conducted by those that committed the cyber attack, or that the information accessed in the attack is being used by the scammers.
Anthem will contact current and former members via mail delivered by the U.S. Postal Service about the cyber attack with specific information on how to enroll in credit monitoring.
For more guidance on recognizing scam email, please visit the Federal Trade Commission website.
Data Security at Allen Insurance and Financial
Allen Insurance and Financial partners with a cyber security firm to ensure the security of client data.
All systems at Allen Insurance and Financial are monitored 24/7 by a cyber security firm.
Call Allen Insurance and Financial With Questions: 800-439-4311
