State confirms health data security breachBy DAVE GRAM
The Associated Press | November 23,2013
File Photo Mark Larson is commissioner of the Department of Vermont Health Access. He said a security breach confirmed Friday on the state's health exchange website was the only one of its kind.MONTPELIER — Officials overseeing the Vermont Health Connect website confirmed Friday there was a security breach on the system last month in which one user got improper access to another user’s Social Security number and other data.
A report from state to federal officials overseeing the health insurance exchanges set up under the Affordable Care Act said a consumer reported the incident with the Vermont Health Connect website Oct. 17.
The consumer, whom officials would not identify, reported that he received in the mail — from an unnamed sender — a copy of his own application for insurance under the state exchange.
“On the back of the envelope was hand-written ‘VERMONT HEALTH CONNECT IS NOT A SECURE WEBSITE!’ This was also (written) on the back of the last page of the printed out application,” said the incident report.
The report was prepared by Greg Needle, privacy administrator with Vermont Health Connect, and filed with the federal Centers for Medicare and Medicaid Services, known as CMS. The Associated Press obtained it after a request under the state public records law to the Department of Vermont Health Access.
The report did not identify the individual consumers involved in the breach.
Mark Larson, commissioner of the Department of Vermont Health Access, said the incident described in the report was the only one of its kind since Vermont Health Connect launched Oct. 1. He said technical changes had been made in the way the system handles user names and passwords.
“This was one case, and it was responded to appropriately,” Larson said, adding that the department’s main concern is data security and making sure the “unique circumstances” that led to the breach cannot be replicated today.
During a meeting of the House Health Care Committee on Nov. 5, Rep. Mary Morrissey, R-Bennington, asked Larson to comment on information she had received about a security breach or breaches on the system. Larson said his department had investigated one such complaint and it had proven unfounded.
Morrissey said Friday she was disturbed to hear now that the department had reported a breach to CMS more than two weeks earlier.
Security breaches have been a concern nationally as federal and state exchanges have set up around the country. No major breaches have been reported, although in one publicized case the personal information of a South Carolina man was delivered to a website user who lives in North Carolina.MORE IN Vermont NewsA confidential memo obtained by Vermont Public Radio shows that the Agency of Education is still... Full Story
- Most Popular
- Most Emailed
- RICHARD'S POOR ALMANACK: On this day 1739, 'Richard Palmer' identified in prison at York Castle as the notorious outlaw DICK TURPIN; IN 1836, Battle of the Alamo begins near San Antonio de Bexar, Texas; 1896, the Tootsie Roll invented by LEO HIRSCHFELD.
- RICHARD'S POOR ALMANACK: On this day in 1472, Orkney, Shetland islands put up as collateral by Norway to Scotland in lieu of dowry for MARGARET OF DENMARK on her marriage with JAMES III, king of Scotland; 1962, JOHN GLENN first American to orbit Earth.
- TOMORROW'S HEADLINES TODAY: City mayoral candidates debate campaign issues; Hartford, Conn., woman still missing; Neal Goswami reports attempts to legislate suicide; local woman loses 100 pounds through TOPS program.
- RICHARD'S POOR ALMANACK: On this day in 1878, JOHN TUNSTALL murdered near Lincoln, New Mexico, by the outlaw JESSE EVANS; in 1930, ELM FARM OLLIE first cow to fly in aircraft, first to be milked airborne; 1955, nuke test WASP; '79, snow in Sahara.
- TOMORROW'S HEADLINES TODAY: Rutland Herald News Editor Alan J. Keays and staff writer Gordon Dritschilo discuss stories planned for the February 18, 2015, edition of the newspaper: Winter budgets maxed, legal marijuana, Springfield bank job, USPS slowdown
- RICHARD'S POOR ALMANACK: On this day in 1249 AD, ANDRE of LONGJUMEAU is dispatched by LOUIS IX of France to meet the KHAGAN, ruler of the Mongol Empire; in 1804, during 1st Barbary War, STEPHEN DECATUR scuttles the pirate-held USS Philadelphia in Tripoli.