Data breach exposes WellPoint applicants' personal information

An applicant sued after being able to access other people's data on the insurer's website. The glitch may have affected nearly half a million people.

By Pamela Lewis Dolan — Posted July 15, 2010

Print  |   Email  |   Respond  |   Reprints  |   Like Facebook  |   Share Twitter  |   Tweet Linkedin

Indianapolis-based WellPoint is notifying nearly 500,000 individual policy applicants of possible exposure of personal data on a website used to track applicant status.

The situation came to light when the company was sued by an applicant to WellPoint-owned Anthem Blue Cross of California who was able to manipulate the web address within the site to gain access to other applicants' information. The lawsuit was filed in March.

In a statement e-mailed to American Medical News, WellPoint spokesman Jon Mills said a small number of people were able to access the unauthorized data through this manipulation, but most of them were attorneys representing the plaintiff.

Mills said the ability to manipulate the website was made possible after an upgrade to the system. A third-party vendor validated that all security measures were in place when, in fact, they were not, Mills said. Changes were made to the system soon after the situation was discovered.

WellPoint requested that the attorneys representing the plaintiff return all of the information obtained. The data since has been turned over to a court-approved custodian.

The company is analyzing the data to identify all the individuals whose information may have been accessed before the glitch was corrected. It is unaware that any information was used inappropriately.

The company reported the breach to the Dept. of Health and Human Services, as required by law, which lists reports of breaches affecting more than 500 people online (link).

WellPoint reported that 480,000 people may have been impacted. It is offering identity protection services for one year to those affected.

Mills said WellPoint is weighing its own legal options about the data and any remediation of costs incurred because of the plaintiff's actions.

Back to top



Read story

Confronting bias against obese patients

Medical educators are starting to raise awareness about how weight-related stigma can impair patient-physician communication and the treatment of obesity. Read story

Read story


American Medical News is ceasing publication after 55 years of serving physicians by keeping them informed of their rapidly changing profession. Read story

Read story

Policing medical practice employees after work

Doctors can try to regulate staff actions outside the office, but they must watch what they try to stamp out and how they do it. Read story

Read story

Diabetes prevention: Set on a course for lifestyle change

The YMCA's evidence-based program is helping prediabetic patients eat right, get active and lose weight. Read story

Read story

Medicaid's muddled preventive care picture

The health system reform law promises no-cost coverage of a lengthy list of screenings and other prevention services, but some beneficiaries still might miss out. Read story

Read story

How to get tax breaks for your medical practice

Federal, state and local governments offer doctors incentives because practices are recognized as economic engines. But physicians must know how and where to find them. Read story

Read story

Advance pay ACOs: A down payment on Medicare's future

Accountable care organizations that pay doctors up-front bring practice improvements, but it's unclear yet if program actuaries will see a return on investment. Read story

Read story

Physician liability: Your team, your legal risk

When health care team members drop the ball, it's often doctors who end up in court. How can physicians improve such care and avoid risks? Read story

  • Stay informed
  • Twitter
  • Facebook
  • RSS
  • LinkedIn