Frequently Asked Questions about the Cyber Attack on Anthem, Inc.
What is the situation?
Anthem, Inc. – a sister Blue Cross and Blue Shield Plan – announced on February 4, 2015, that they had suffered a significant cyber attack on their information technology systems. The incident resulted in the compromise of personal information for some of our current and former members and their dependents. Those who received healthcare services over the last 10 years in one of the 14 states Anthem serves may be affected. These states include: California, Colorado, Connecticut, Georgia, Indiana, Kentucky, Maine, Missouri, Nevada, New Hampshire, New York, Ohio, Virginia and Wisconsin.
What type of information was accessed?
Anthem determined the compromised information includes current and former members' names, dates of birth, health ID numbers, addresses, phone numbers and email addresses. Some Social Security Numbers (SSNs) were compromised as well, but not all records maintained by Anthem had SSNs associated with them. Anthem's investigation to date shows no credit card information, no banking information, and no confidential health information were compromised.
Are Anthem and Blue Cross and Blue Shield of Alabama the same company?
No. Anthem and Blue Cross and Blue Shield of Alabama are completely separate companies. The Blue Cross and Blue Shield System consists of 37 independent locally operated Blue Cross and Blue Shield companies. Even though Anthem and Blue Cross and Blue Shield of Alabama are both part of the Blue Cross and Blue Shield System, we are completely separate companies. Anthem is an Indianapolis-based company that operates Blue Cross and Blue Shield plans in 14 states, but not in Alabama.
I am not an Anthem member. Why was my personal information impacted?
Your data was impacted because you are a current or former Blue Cross and Blue Shield of Alabama member who received healthcare services in the past 10 years in one of the 14 states serviced by Anthem (California, Colorado, Connecticut, Georgia, Indiana, Kentucky, Maine, Missouri, Nevada, New Hampshire, New York, Ohio, Virginia and Wisconsin). In order to facilitate the payment for services our members receive outside of the state of Alabama, we must share data with other Blue Cross and Blue Shield Plans (including Anthem). That is why your personal information was in Anthem's data warehouse.
Were the computer systems at Blue Cross and Blue Shield of Alabama attacked?
No, this incident is specifically a sophisticated external cyber attack on the Anthem computer system. Blue Cross and Blue Shield of Alabama is diligent in protecting our members' data that is stored in our information technology systems. Our technology security team is learning as much as possible about how the cyber criminals attacked the Anthem system, so we can further safeguard and secure our information technology systems.
What happens if my personal information was compromised?
Anthem is offering all impacted customers two years of credit monitoring and identity theft repair services, free of charge. The 24-month coverage period began February 13, 2015. Blue Cross and Blue Shield of Alabama and Anthem will send letters to those individuals who have been impacted, which will explain more about the services being offered. To learn more about these services, visit www.AnthemFacts.com.
How will I know if my personal information has been accessed? When will I hear?
We have been working diligently with Anthem to understand the scope of the attack and determine which of our current and former members' information was accessed. Those affected will soon be receiving written notifications from Blue Cross and Blue Shield of Alabama and from Anthem.
- Blue Cross and Blue Shield of Alabama is sending written notification to our impacted current and former members regarding next steps they can take to receive the free protection services from Anthem.
- Anthem will also be mailing letters over the coming weeks to all who were affected, which will contain detailed information on the services Anthem is providing and instructions on how they can access these services.
- Our impacted current and former members who receive a letter from us do not have to wait on Anthem's letter. They can go to www.AnthemFacts.com to get more information about the services Anthem is offering.
Are there people living in Alabama who have Anthem coverage? What should these Anthem members do?
Yes, there are Alabamians who carry an Anthem Blue Cross Blue Shield card. They will also be receiving a letter from Anthem. In the interim, they can visit www.AnthemFacts.com to find out more about this cyber attack and the free protection services available to them.
Who can I contact for more information?
If you have questions about the cyber attack on Anthem or about the free protection services being provided to those who were impacted by the incident, please visit www.AnthemFacts.com.