VON BEHREN & HUNTER LLP

Anthem Blue Cross reported a data security incident involving its legal services provider, Von Behren & Hunter LLP (VBH). On January 24, 2022, VBH discovered unauthorized access to its network. On February 10, 2022, VBH confirmed that certain data was accessed and acquired without authorization. A subsequent review on March 25, 2022, determined that some Anthem Blue Cross members' protected health information (PHI) and personal information (name) may have been stored on the impacted server. VBH engaged the FBI and offered identity protection services to affected individuals. The incident is classified as a third-party vendor compromise.

Von Behren & Hunter LLP (a Business Associate, CA) reported to HHS OCR on 2022-04-11 a ransomware attack affecting the PHI of 5,852 individuals. Breached information was located on a Network Server. PHI involved included names, dates of birth, addresses, claims information, diagnoses, and other treatment information. The BA notified HHS, affected individuals, and the media. Additional technical safeguards were implemented, complimentary credit monitoring was offered, policies were revised, and employees were retrained. OCR provided technical assistance regarding the HIPAA Rules.