PhysicalHealthcareFinancial ServicesHealthcareLossCustomer Data InvolvedPHIHealth (basic)Government IDIdentity (basic)CriticalActive

CENTENE CORPORATION

bd_1af33f45d5ac3fd7 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jan 25, 2016

Filed

Feb 1, 2016

To disclose

7 days

Affected

950,000scope not determined

Confidence

67%

Full breach record for CENTENE CORPORATION →

Centene Corporation announced on January 25, 2016, that six hard drives containing PHI and PII of approximately 950,000 individuals were unaccounted for in its IT inventory. The data included names, SSNs, and health information. Centene is searching for the drives, notifying affected individuals and regulators, and offering credit/health monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 days

Jan 25, 2016

Discovered

Feb 1, 2016

Filed

vs. sector median

10 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed950,000 affectedView incident

Name: CENTENE CORPORATION
norm: centene
Domain: centene.com

Name: CENTENE CORPORATION
norm: centene
Domain: centene.com
Industry: HealthcarellmFinancial Servicesllm

Discovered: Jan 25, 2016
Materiality determined: —
Notification sent: —
Affected individuals: 950,000scope not determined
Data types: PHIHealth (basic)Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Announced an ongoing comprehensive internal search for six hard drives
Beginning the process of notifying all affected individuals and all appropriate regulatory agencies
Offer of free credit and healthcare monitoring
Changes made: Reinforcing and reviewing its procedures related to managing its IT assets
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2016/CenteneCorporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 1, 2016
Raw hash: 0cf055a890a76c86b353f3942b72a47c4a72e5112a8366b37ac32ad4a9691464

Reporting entityCENTENE CORPORATION

Victim entityCENTENE CORPORATION

Incidentdiscovered Jan 25, 2016

Stated responseAnnounced an ongoing comprehensive internal search for six hard drives

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov