09 Apr 2012

More than 181,000 Medicaid and CHIP records stolen by Eastern European hackers

More than 181,604 Medicaid and Children’s Health Insurance Plan records were stolen, including 25,096 social security numbers, after hackers broke into the Utah Department of Health files, according to a department  press release.

An investigation revealed that millions of people may have had information stolen in the attack which, based on the IP address of the hackers, came from Eastern Europe. “The thieves actually removed 24,000 files,” according to health department representatives. “One single file can potentially contain claims information on hundreds of individuals.”

The department already started reaching out to clients whose personal information was stolen, starting with those who had their social security numbers jeopardized. They will receive an e-mail telling them how to take advantage of free credit monitoring services for a year.

“We understand clients are worried about who may have accessed their personal information, and that many of them feel violated by having their information compromised,” the department’s Deputy Director Michael Hales said in a statement. “But we also hope they understand we are doing everything we can to protect them from further harm.”

Claims stored on servers like the one that experienced the breach can include client names, addresses, birth dates, SSNs, physician’s names, national provider identifiers, addresses, tax identification numbers, and procedure codes designed for billing purposes.