Nearly 3M people hit in Harvard Pilgrim healthcare data theft

Nearly a year on from the discovery of a massive data theft at healthcare biz Harvard Pilgrim, and the number of victims has now risen to nearly 2.9 million people in all US states. Pilgrim's problems were first admitted last year after a March ransomware infection that affected systems tied to the health services firm's …

[ecofeco]

Jaded

I've gotten to the point where I don't care any more. The companies sure as hell don't.

Dammit I wish I could afford to retire.

[Anonymous Coward]

Re: Jaded

So much for HIPPA compliance.

[Claptrap314]

Re: Jaded

Well, I don't think we know enough to really say. If they were hit, let me speculate wildly, via bad library code side-loaded by their init system that compromised inter-system communications, you can claim that they violated HIPPA, but really, there is nothing that any but the most technically sophisticated organizations are going to be able to do. Certainly, it is true that "there are no civilians" in this fight, but if we want any business to happen at all, companies are going to have to be allowed a reasonable effort to maintain security.

It's really kind of ironic, my boss is unhappy with me because I implemented a "complicated" system that would have isolated the sshd compromise to the one account that the attack came through.

It's not paranoia if they really are out to get you.