Security Breach Research Paper

Anthem Inc. is one of the largest health benefits company in this country. The merging of WellPoint Inc. and Anthem Inc. in 2004 was the start to this healthcare company. Anthem Inc. is a part of the Blue Cross and Blue Shield Association. They serve people primarily in 14 different states (“Company History, n.d.). At that point in time, it was the largest healthcare security breach in our history (Weise 2015). During 2015 in the month of February, Anthem Inc. announced to the public that it had suffered an attack that affected 78.8 million individuals. The Breach began around February 18, 2014 and was eventually discovered in late January 2015 leading to the announcement early February 2015. It was also concluded that the perpetrator of

The first point of analysis is related to National Data Breach reporting which main goal is to protect consumers against identity theft and incentivize businesses for better cyber security. Businesses are required to inform the consumers if the intruder had access to the consumers’ personal information in order to prevent further damage or loss. The information security policy of State of Maryland is set forth to provide any data breach incident

Removing any inaccurate information from patient records could take years and cost medical companies in all types of ways -- from administrative costs to malpractice lawsuits. High-profile breaches in personal medical data continue to increase and are often low-tech -- criminals grabbing an unguarded laptop, phishing scams or people getting access to hard copies of medical records. A study published in the Journal of the American Medical Association reported that more than 29 million breaches of information security in healthcare occurred between 2010 and 2013.[3] The recent hacking of major insurance companies Anthem and Premera Blue Cross generated record breaches that dwarfed the JAMA study figures by exposing more than 90 million records to criminals in just a few months.[4] The JAMA study also revealed that there have been more than 1,000 major breaches since 2010, and of these, one-third occurred in five populous states: Florida, California, New York, Texas and

Statistics show that most security breaches are direct results of insider misconduct rather than being hacked. According to the most recent Verizon Data Breach Investigations Report, about “285 million records were compromised in 2008.” Seventy-four percent of the incidents were from inside sources. Users are more likely to be victims of computer virus infections, inquisitive students/co-workers, and hardware failures than to be victims of an Internet security attack.

It could be very difficult to discover and stop any kind of data breach. In some way DBIR is able to stop and facilitate more information sharing on security incidents. About 92% were perpetrating outsiders. 37% of breaches affected financial organizations and 24% of breaches occurred in retail environments and restaurants. The main reason of breaching is caused by hacking and malware. According to the current result compared to 2011 85% of initial compromises occurred within minutes or less. About 70% breaches were discovered by external parties. Also it is not always the organization that could identify the breach but customers and the end user also identify the breaches in many

National Institute of Standards and Technology (NIST) and Federal Information Security Management Act of 2002 (FISMA) were established to provide a set of standards, guidelines to assist all federal agencies in executing the FISMA and to assist in managing cost-effective programs to protect organization’s information and information systems. NIST founded on March 03, 1901 and now headquartered Gaithersburg, Maryland. Founded by U.S. Congress, NIST was established to impose general measurement standards laboratory; it is a non-regulatory agency of the United States Department of Commerce. The fledgling agency quickly assembled standards for electricity, length and mass, temperature, light, and time, and created a system to transfer those

Anthem Inc, a leading health insurance company that provides health insurance for personal, business and government entities across the States. Anthem is a prosperous company, ranking within the Fortune 50 list, with total assets equaling $61.7 Billion. They have over 52,000 associates to serve over 39.8 million members. The company has presence in 14 States and continues to offer its services in growing markets (“Stats and Facts”).

In July of 2015, Anthem, Inc. announced its intention to acquire competitor Cigna Corp (Mathews & Hoffman, 2015). According to the company’s joint website, betterhealthcaretogether.com, Anthem is one of the nation’s largest health service companies that covers approximately 38.5 billion people and boasts annual revenue of $78.5 billion. Led by president and CEO Joseph R. Swedish, Anthem will purchase smaller health service company, Cigna. Cigna covers around 14.5 billion people and has $36.5 billion in annual revenue (bettertogether.com, 2015).

In the article “Anthem Inc. Reeling After Behemoth 80M-Record HIPAA Breach,”2016, With healthcare organizations presenting the ability for a patient to check on their medical records online that valuable information is a huge target for cyberattacks. Medical information and records are very profitable for cyberattacks on the healthcare industry. One major cyberattack on the healthcare industry was directed toward Anthem. The nation’s second largest healthcare insurance provider was hacked in February 2015. This cyber attack stole 80 million records exposing the names, addresses, social security numbers, medical ID and, income data. From what information Anthem could share they stated that the information taken could be used for identity theft

Data is a crucial job for an IT industry to secure. It is hard to keep information secured there's many factors. How secure is the Network and encryption? What about physical security is there any ports or fiber optic cables that can be exploited? How fragile is the data that needs to be secured? Based on this risk check list Brazil and the European Union are going to lay down their own fiber-optic line on the oceans floor to stop data from getting routed through the U.S. (Goldstein 24-27). There might be some data given to the server that helps aid the user on a website. What this might look like is shown in Figure 1. Metadata

People across the world are becoming disproportionately dependent on modern day technology, which results in more vulnerability to cyber-attacks including cybersecurity breaches. Today, the world continues to experience inordinate cases of cybersecurity meltdowns. There is a rapid growth in complexity and volume of cyber-attacks, and this undermines the success of security measures put in place to make the cyberspace secure for users. Cyber-attacks on both private and public information systems are a major issue for information security as well as the legal system. While most states require government organizations and certain federal vendors to report incidences of data breaches, no equivalent legislation exists to cover private entities.

Any incident that results in the unauthorized access of the applications, services or data by bypassing the security mechanisms is known as a Security breach or Security violation. Security breaches are usually used within the context of companies or government institutions where security defenses are bypassed so that the intruders can access the confidential information, which can include highly sensitive data. There can be many internal and external threats that can result in a security breach. The consequences of security breach can be high based on what type of sensitive data is stolen or viewed. Ukraine Power Grid Cyber Attack is a kind of security breach that took place on 23rd December 2015 and is known as first successful

Nowadays, information security is concerning an increasing number of organisations, consequently to a large number of security breach cases broadcasted by the media. This is the consequence of the company’s objective to improve productivity and market competitiveness, making more and more data accessible by the employees, in various places, with many devices (Maxim, 2011). Amongst all this data breaches, 32% are due to insider attacks (Imperva Inc survey, 2010), which is a significant amount. Those insider threats may come from negligence or malicious intent, and might cause several harms, like financial loss or damage of reputation. With this in mind, this report will try to discuss and analyse the different approaches to detect and response to insider threats. In other terms, it will present the state of the art of some tools and good practices that could be useful for companies wanting to counter insider threats. A relevant sample of the best tools will be extracted and analysed, but this will not be an exhaustive tools list, and each organisation should adapt it according to its own characteristics.

1. Data Breach: A data breach is an incident in which sensitive, protected or confidential

Data breaches are increasingly common as companies are faced with securing a multitude of networks, devices, applications, users, and files used in the course of conducting business. And with global workforces and the rise of cloud computing, security perimeters are more difficult to define than ever before. These issues combine to create a perfect storm – a climate ripe for hackers to take advantage of. (Lord, 2017) Below are the trending data loss trends to watch out for: