Horizon fined $1.1M for not protecting customers' private info

TRENTON -- The state's largest insurance carrier will pay a $1.1 million penalty for failing to protect the private information of 690,000 policy holders whose information was contained on two laptops stolen from the company's Newark headquarters in 2013.

An investigation by the state Division of Consumer Affairs revealed Horizon Blue Cross Blue Shield of New Jersey had not encrypted the names, addresses, birthdates, insurance identification numbers, and some Social Security Numbers and limited medical information for 690,000 customers.

The information was protected only by a password, Steve Lee, Director of the Division of Consumer Affairs said.

The thief cut the cables securing the laptops to a desk during a period when the office was improperly supervised during building renovations, Lee said.

Read more: http://www.nj.com/healthfit/index.ssf/2017/02/horizon_will_pay_11m_state_fine_for_security_breac.html