Attorney General Richard Blumenthal issued a scathing press release related to Health Net’s recent data loss and security breach. Blumenthal called Health Net’s story on it "sanitized" and its six month delay in reporting "unconscionable." Blumenthal called for a federal investigation and intensified state efforts because of the sensitive financial and health information at risk for exposure.
Health Net is based in Shelton, Connecticut and is one of the largest health plans in the Northeast serving approximately 580,000 members. A report by Lucas Mearian of Computerworld stated that the information stolen was a portable hard drive that had not been encrypted. Proper encryption could have prevented access of the information.
Connecticut consumers have been affected by the data loss and more than a million people had social security numbers and financial and medical information exposed. Consumers in Arizona, New Jersey, and New York also had sensitive information exposed. Thus far, there has been no report of identity theft or misuse of the information.