AETNA INC.

Aetna, Inc. (Health Plan, CT) reported to HHS on 2017-10-23 an Unauthorized Access/Disclosure affecting 1,506 individuals. A business associate, Real Time Health Quotes LLC (an insurance producer), stored PHI in an unsecured cloud storage application. Exposed data included names, dates of birth, Social Security numbers, medical histories, bank account, and credit card information. Aetna notified HHS, media, and affected individuals; offered free credit monitoring; terminated the BA relationship; and initiated a review of cloud storage use among similar BAs. Breached information located on Network Server.

Affected (this filing): 1,506