SACRAMENTO, Calif. — A foreign government was likely behind a cyber breach of health insurance company Anthem Inc. that compromised more than 78 million consumers’ records, investigators said Friday.

The California Department of Insurance said Anthem — the nation’s second-largest health insurer — has agreed to make $260 million in improvements to its information security systems. It will also provide credit protection to consumers whose information was compromised, officials said.

Investigators found with a “significant degree of confidence” that the cyber attacker was acting on behalf of a foreign government, Insurance Commissioner Dave Jones said. He did not identify the government.

“This was one of the largest cyber hacks of an insurance company’s customer data,” Jones said. “Insurers have an obligation to make sure consumers’ health and financial information is protected.”

The hackers accessed Social Security numbers, birthdates and employment details for customers — all key ingredients for stealing someone’s identity. The state agency says intruders cracked Anthem’s database in February 2014 with a phishing email. Anthem has said hackers evaded multiple layers of security to reach its database.

However, a lawsuit filed by customers who say they were affected by the breach paints Anthem as a ripe target. It says the insurer allowed wide employee access to its database and didn’t train employees on handling phishing emails.

The hackers gained remote access to at least 90 other systems within the Anthem enterprise, including Anthem’s data warehouse. The cyber breach was discovered by Anthem in January 2015. In early February, Anthem and its affiliates announced the company had suffered the breach that included the records of at least 12 million minors.

Unlock this article by subscribing to STAT Plus and enjoy your first 30 days free!

GET STARTED

What is it?

STAT Plus is STAT's premium subscription service for in-depth biotech, pharma, policy, and life science coverage and analysis. Our award-winning team covers news on Wall Street, policy developments in Washington, early science breakthroughs and clinical trial results, and health care disruption in Silicon Valley and beyond.

What's included?

  • Daily reporting and analysis
  • The most comprehensive industry coverage from a powerhouse team of reporters
  • Subscriber-only newsletters
  • Daily newsletters to brief you on the most important industry news of the day
  • STAT+ Conversations
  • Weekly opportunities to engage with our reporters and leading industry experts in live video conversations
  • Exclusive industry events
  • Premium access to subscriber-only networking events around the country
  • The best reporters in the industry
  • The most trusted and well-connected newsroom in the health care industry
  • And much more
  • Exclusive interviews with industry leaders, profiles, and premium tools, like our CRISPR Trackr.
Sign up to receive a free weekly opinions recap from our community of experts.
Privacy Policy