Audit finds security breaches for Conn. Health Insurance Exchange

HARTFORD, Conn. — The Connecticut Wellbeing Coverage Exchange failed to report to point out regulators at least 44 incidents in which clients’ individually identifiable information was breached which include one particular incident that impacted additional than 1,000 individuals, the state’s auditors exposed in a new report.

The Auditors of Public Accounts on a regular basis audits point out businesses. The report, issued Tuesday, found 44 breaches of shopper info from July 2017 through March 2021. One of those incidents involved just one phishing fraud which affected 1,100 purchasers.

The report reported one particular of the Exchange’s contractors accounted for 34 of the breaches. 5 other entities were being responsible for the remaining ten breaches.

Condition regulation involves that all quasi-community organizations promptly notify the Auditors of Community Accounts and the State Comptroller of any breach of security. The Exchange, which operates Obtain Well being CT, did not do that in these circumstances, auditors claimed.

Signal up for the FOX61 newsletters: Morning Forecast, Morning Headlines, Night Headlines

In addition to expanding the opportunity of id theft for the men and women who had their data compromised, the auditors said the point out was forced to pay for two-year safety checking for consumers who experienced a breach.

In the report, the Trade explained they keep an eye on “vendor compliance with safety requirements and is implementing additional protocols to watch compliance and increase seller protection procedures. The Trade necessitates any seller producing a breach to address the charge of two many years of protection monitoring for consumers who seasoned a breach.”

In a assertion to FOX61, Accessibility Wellbeing CT said it is committed to “preserving the protection of the consumer facts utilised in its operations.”

“In a the latest audit, it was recognized that 44 breaches that were being noted to HHS and the Connecticut AG have been not submitted with the Auditors and Comptroller,” the statement said. “Access Health CT (AHCT) straight away submitted copies of the studies formerly filed with the AG and HHS with the Auditors and Comptroller to correct the error.”

The statement ongoing: “Additionally, AHCT has continually worked with its distributors, including its connect with heart seller, as perfectly as scanning and doc processing distributors and mailing distributors to develop guidelines and treatments to sustain the stability of PII and Safeguarded Health Information and facts (PHI). AHCT also has procedures and treatments in area for its possess employees, conducts annual privateness and protection teaching for staff and contractors and needs sellers to coach their staff and comply with all AHCT needs.”

Associated: Former well being exchange CEO pays $5,000 point out ethics penalty

Other things in the report took the agency to job for how it awarded some contracts to a sole resource. Auditors also explained the Trade did not comply with other point out buying policies that have to have order orders to be authorized just before companies are acquired.

“The Trade has refined its paying for procedures to be certain compliance with obtaining policies and processes, and has executed the use of a new requisition technique to prevent irregularities or noncompliance,” said the agency’s response in the report. 

Associated: Condition audit critical of payroll methods at UConn Overall health, finds inconsistencies

Auditors also reported the Exchange also failed to submit annual and quarterly studies to the governor’s place of work. The agency blamed staffing issues and explained the experiences have been appropriately submitted considering the fact that December 2020. 

Doug Stewart is a electronic information producer at FOX61 News. He can be arrived at at [email protected].

Have a story notion or anything on your head you want to share? We want to hear from you! E mail us at [email protected] out?v=videoseries

Here ARE Far more Techniques TO GET FOX61 News

Down load the FOX61 Information Application

iTunes: Simply click below to download

Google Participate in: Click here to down load

Stream Stay on ROKU: Add the channel from the ROKU retail store or by exploring FOX61.