Privacy and Information Compliance Solutions Limited

A key supply chain partner of a NYSE and S&P Listed health insurance and managed health care provider suffered a large ransomware attack. The ransomware attackers gained access to the personal data of over 1 million customers and users. The health and other personal data accessed were highly sensitive and diverse. There was a high risk of future unauthorised access, identity theft, impersonation and false claims. The ransomware attack had all the hallmarks of a new ransomware group that had been formed by past members of two of the most prolific ransomware groups operating since the start of the covid-19 coronavirus pandemic. In a complex supply chain, our client needed to ensure that it was kept up to date with all the data breach response steps, strategy, decisions, risk analysis and that high-quality internal records were produced. They also wanted to ensure that public announcements, notices to breach victims and regulator notices were clear, on time and effective.