Tufts Health Plan recently announced that the names, birthdates and Social Security numbers of approximately 8,830 current and former members of Tufts Medicare Preferred had been stolen (h/t SC Magazine).
The breach was brought to Tufts' attention by federal officials.
While the announcement doesn't say how the breach occurred, it does say it wasn't "due to an electronic breach, IT system vulnerability or hacking" -- which indicates that it may well have been an insider breach.
"We have a zero tolerance policy on the misuse of any of our members’ personal or medical information," the company said. "We are reinforcing our existing policies and practices in the workplace and evaluating additional safeguards to help prevent a similar incident from occurring in the future."https://o1.qnsr.com/log/p.gif?;n=203;c=204650394;s=9477;x=7936;f=201801171506010;u=j;z=TIMESTAMP;a=20392931;e=i
"The individuals whose information was stolen are currently being notified," Tufts said. "We will also be notifying all our current Tufts Medicare Preferred members who were not affected, to make them aware of this incident."
All affected Tufts Medicare Preferred members are being offered one year of free access to credit monitoring and identity theft protection through Experian's ProtectMyID Elite, and any current or former members who aren't affected but "are still worried" will also be provided with free access to the same service.