The Hartford Business Journal reports:
Hartford health insurer Aetna Inc. is being sued for a data breach that allegedly exposed current, former and prospective employees’ personal information to the Web.
The class-action suit was filed in a Pennsylvania District Court last Friday. It claims that Aetna allowed hackers to enter its Web site and gain access to Social Security numbers from about 65,000 current, former and potential employees and demands credit monitoring, punitive damages, costs and other relief.
Aetna spokeswoman Cynthia Michener said today the company “did the right thing by proactively notifying people about this incident.” It is offering free credit monitoring to those who have been affected, Michener said, “even though our independent IT security consultant has not determined that any information was accessed beyond email addresses.” […]
The complaint alleges that “Aetna unlawfully failed to maintain reasonable systems and procedures to protect (Allison’s) and (other employees) information.”
According to the complaint, Aetna also suffered a similar data breach in 2006.