Page 272 -

SeCUrity GUiDe From Anthem to Anathema

Anthem’s failure to encrypt account records negligent, and Premera Blue Cross announced the loss of 11 million cus- 271
they subsequently filed lawsuits. tomer records. The lost customer records were even more
sensitive because they included bank-account and medical
Bad for Business or Business as Usual? data. 12
How would you feel if your account data had been part of Despite these threats, it is highly unlikely that com-
the Anthem breach? Would this incident make you want panies will begin pulling data from the cloud. Consumers
to switch to a different healthcare provider, or would you clearly want the ease of use that Web-based services pro-
recognize that large corporate data breaches are just a fact vide. However, it is possible that corporations’ security
of life in a digital world and that your new healthcare pro- practices could evolve from being a necessary evil to becom-
vider could be equally vulnerable? The reality is that data ing a competitive advantage. In fact, there could come a
breaches are so pervasive that it is not a matter of if, but time when a company’s reputation for information security
when, a company holding data about you will be hacked. could be more valuable than the very products or services
In fact, about a month after the Anthem data breach, it sells!

DiSCUSSion QUeStionS

1. Think about all of the cloud services you use. How vul- 4. Have prior data breaches, like those at Home Depot or
nerable are you right now to having your data stolen? Target, affected your behavior as a consumer? How?
2. What are some of the ways you can lower the chances 5. How can a greater awareness of security best practices
of your personal data being stolen? help you in your current job?
3. The article explains how Anthem failed to encrypt sensi-
tive account data. Why would encrypting account data
make it more secure?