Aetna named in security-breach lawsuit

[security curmudgeon <jericho () attrition org>]

http://www.hartfordbusiness.com/news9190.html

Aetna named in security-breach lawsuit
By Greg Bordonaro

Hartford health insurer Aetna Inc. is being sued for a data breach that 
allegedly exposed current, former and prospective employees' personal 
information to the Web.

The class-action suit was filed in a Pennsylvania District Court last 
Friday. It claims that Aetna allowed hackers to enter its Web site and 
gain access to Social Security numbers from about 65,000 current, former 
and potential employees and demands credit monitoring, punitive damages, 
costs and other relief.

Aetna spokeswoman Cynthia Michener said today the company "did the right 
thing by proactively notifying people about this incident." It is offering 
free credit monitoring to those who have been affected, Michener said, 
"even though our independent IT security consultant has not determined 
that any information was accessed beyond email addresses."

[..]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php