Data breach leads to identity theft for employees

Health insurance provider, Kaiser Permanente recently experienced a data breach that led to the release of the personal information of tens of thousands of employees.

How many victims? 29,500.

What type of personal information? Names, addresses, dates of birth and Social Security numbers for Kaiser employees in Northern California.

What was the response? The company launched an internal investigation to determine the source of this breach and is working closely with law enforcement. A toll-free phone line was set up to answer employee questions. Affected employees will receive one year of free credit monitoring.

Details: The breach did not involve Kaiser member information and no personal health details have been jeopardized, according to a written statement issued by Gay Westfall, senior vice president of human resources for the Kaiser Foundation Health Plan.

A "handful" of employees have reported identity thefts as a result of the breach, Kaiser said.

The breach came to light after the arrest of San Ramon resident Mia Garza, 28, on Dec. 23 on suspicion of possession of stolen property and forgery. In a confiscated computer, San Ramon police later found a file with Kaiser employee data, said San Ramon police Cpl. Rich Persson.

Garza is not a Kaiser employee, and it was not immediately clear how she might have obtained the Kaiser information.

Kaiser was informed of the security breach in late January, said spokesman Jim Caroompas.

Garza, who was released from jail Jan. 14, faces felony charges involving two counts of receiving stolen property, two counts of identity theft and two counts of forgery.

Quote: "We regret that this unfortunate incident occurred," Westfall said. "We are notifying each employee who may be affected by phone and letter to provide additional information."

Source: www.mercurynews.com, San Jose Mercury News, “Kaiser warns nearly 30,000 employees of data breach,” Feb. 6, 2009.
close

Next Article in The Data Breach Blog

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.