HackingHealthcareFinancial ServicesHealthcareCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentPHIMediumContained

Anthem Inc.

bd_8f37e1c095a846da · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 29, 2015

Filed

Feb 13, 2015

To disclose

15 days

Affected

Not disclosed

Linked

4 records

Confidence

65%

Full breach record for Anthem Inc. →14 incidents on file

On January 29, 2015, Anthem, Inc. discovered a sophisticated cyber attack that gained unauthorized access to its IT system. The attack likely began in early December 2014. Personal information including names, dates of birth, Social Security numbers, health care ID numbers, addresses, email addresses, and employment information was accessed. Anthem contacted the FBI and retained Mandiant for investigation. Identity protection services were provided to impacted individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 29, 2015 → Notified Feb 13, 201515d ✓ CA 60-day OK15 days discovery → filing

Incident timeline

undetected · 59 days

discovery → filing · 15 days

Dec 1, 2014

Begins

Jan 29, 2015

Discovered

Feb 13, 2015

Filed

vs. sector median

7 wks faster

This filing is one of 4 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_0bbff98139b67cc02015-02-13Verified
Hawaii State AGbd_76cd1b5530ae9e562015-02-15 · +2dVerified

Enforcement records (1)

HHS OCR enforcementbd_3d381b99b1c9318e2018-10-15 · +1340dVerified by operator

Name: Anthem Inc.
norm: anthem
Domain: anthem.com

Name: Anthem Inc.
norm: anthem
Domain: anthem.com
Industry: HealthcarellmFinancial Servicesllm

Discovered: Jan 29, 2015
Breach occurred: Dec 1, 2014
Undetected for: 59 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 13, 2015
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmploymentPHI
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Contacted the FBIFully cooperating with the FBI’s investigation

During the incident: Immediately began working to close the security vulnerability
Contacted the FBI
Retained Mandiant to assist in the investigation and to strengthen the security of our systems
Providing identity protection services to all individuals that are impacted
Established a dedicated website (AnthemFacts.com)
Established a dedicated toll-free number
Changes made: Strengthen the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: CA 60-day OK · 15d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 29, 2015
→ Notified: Feb 13, 2015
15d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 29, 2015 → Notified: Feb 13, 2015	15d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRFeb 13 · first

California State AGFeb 13 · first · this page

Hawaii State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-48418
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 13, 2015
Raw hash: 7d74fac8e94417bbac872be51c174dd7501c31dc734a86a573092b0b853c4d98

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Enforcement records (1)

Reporting entityAnthem Inc.

Victim entityAnthem Inc.

Incidentdiscovered Jan 29, 2015

Stated responseImmediately began working to close the security vulnerability

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov