AG Herring urges Virginians to be vigilant in wake of massive Anthem data breach

Attorney General Mark Herring today warned Virginians to be extremely vigilant with their financial accounts, credit reports, and other personal information in light of a massive data breach reported by Anthem, Inc., the second-largest health insurance provider in the nation and the largest insurer in the Commonwealth of Virginia. According to Anthem, hackers breached the company’s computer systems and gained access to the names, birthdays, medical ID’s, Social Security numbers, email addresses, and employment information of 80 million customers across the nation. It is not yet known how many Virginians may be affected, but Anthem has previously stated they have more than 3 million members in the Commonwealth.

“This is one of the largest data breaches we’ve ever seen and given the sensitivity of the financial and personal information contained in medical records, it’s extremely important that Virginians closely monitor their financial information in the days and weeks ahead,” said Attorney General Herring. “These kinds of breaches can lead to an increased risk of identity theft, and criminals may utilize the stolen information to send scam and phishing emails posing as legitimate companies in an attempt to commit fraud or identity theft. If you notice irregular or suspicious financial activity, contact your bank or the business immediately. Never open emails or click links you don’t trust, and take proactive steps to keep your information secure online.”

The Attorney General’s Office received 305 database breach notifications in 2014 and works to ensure that companies experiencing database breaches comply with Virginia law by notifying affected Virginians.  Because data breaches lead to an increased risk of identity theft and fraud, all Virginians should regularly monitor their financial accounts and credit reports.  Free credit reports may be obtained at www.annualcreditreport.com.

In addition to the above advice, citizens should heed the following:

• Use strong passwords for your email, computer, and financial accounts, including variations of capital and lowercase letters, numbers, and symbols of at least 8 characters
• Install anti-virus programs on your computer and scan files and emails regularly
• Never download software programs from unknown publishers
• Check for regular updates to your operating system
• Install and activate a software and hardware firewall on your computer
• Back-up all of your data regularly using a USB drive

The Attorney General’s Computer Crimes section and Victim Notification program are dedicated to empowering Virginians to protect themselves from identity crime and financial crimes, and works with Virginians who find themselves victims to this increasingly common crime. The office publishes the informational resource, “How to Avoid Identity Theft – A Guide for Victims of Identity Theft.”

Additionally, the office offers an Identity Theft Passport, a wallet-sized card that you can carry and present to law enforcement or other individuals who may challenge you about your identity if you have been a victim of an identity crime.  The Identity Theft Passport is available to any Virginian who has filed a police report claiming they are a victim of an identity crime or who has obtained a court order expunging their record as a result of an identity crime. The Attorney General’s Office conducts investigations to confirm the legitimacy of all passport applications.  You may download the Identity Theft Passport from the Attorney General’s website at http://www.ag.virginia.gov/files/IDTPASSPORTI.pdf or contact the Victim Notification program at 804-786-2071.

For additional information and resources regarding computer crimes and other consumer issues, please visit Attorney General Herring’s website at http://www.ag.virginia.gov.