Go to homepage
News

Indiana State Medical Association (ISMA) Computer Equipment Theft Involving Personal Information

Frequently Asked Questions (FAQ's)

What happened?
Two archive backup hard drives containing Indiana State Medical Association group health and life insurance databases were stolen. This occurred while they were being transported to an offsite storage facility in accordance with ISMA's disaster recovery plan.  

When did this happen?
February 13, 2015.

Have the police been notified?
Yes, the incident and all pertinent details were promptly reported to the Indianapolis Metropolitan Police Department (IMPD) and they are actively investigating the matter.

What personal information was involved?
Different people were affected differently. Your letter will specify what specific type of information was involved in your circumstance. It will be one of the following categories:

  • No Medical, No SSN: Information included name, address, date of birth, email address and health plan number.
  • Medical, no SSN: Information included name, address, date of birth, email address, health plan number and medical history information included on your enrollment application for health insurance coverage.
  • SSN: Information included name, address, date of birth, email address, health plan number, and Social Security number.
  • Medical and SSN: Information included name, address, date of birth, email address, health plan number, Social Security number, and medical history information included on your enrollment application for health insurance coverage.

How many people are involved?
39,090 individuals were affected.

Is there anything I need to do to in response to the exposure of my personal information?
The letter you received explains what steps you can take to protect the security of your information. If you have already taken those steps, for instance as a result of the recently publicized Anthem breach, then you may decide that no further steps are necessary. If you do wish to take steps to protect yourself, you may enroll in the ID Experts credit protection and repair services for one year at no charge to you. You may also take advantage of your rights to the free fraud alert services offered by the three major credit bureaus. Placing fraud alerts will give your credit additional protection. In addition, doing so will give you access to copies of each of your credit reports at no cost to you.

Is the ISMA offering any services to help me protect my identity?
Yes. The ISMA has contracted with ID Experts to offer you one year of credit monitoring and repair services at no cost to you. Enroll online at www.idexpertscorp.com/protect. You will need the enrollment access code that is provided in your personal notification letter. If you have questions, call the ISMA toll free at (800) 257-4762.

Can my health plan number/insurance ID be used fraudulently?  
Most medical facilities require proof of insurance to process a claim or service, such as the insurance card. So, the risk is low. However, the notification letter you received provides you with steps you can take to protect your information.

Has the information been misused?
At this time, the ISMA has no knowledge of any use or attempted use of the information exposed in this incident.

What is ISMA doing to prevent this kind of loss from happening again?
As part of its own internal investigation, the ISMA has already engaged outside experts, who are evaluating internal processes to prevent future incidents. The ISMA is also working closely with the Indianapolis Metropolitan Police Department, which is actively investigating the case. The ISMA helped discover at least one surveillance video of the theft.

If there are any updates regarding the investigation into the data loss, how will we be notified?
If there are updates, they will be posted at www.ismanet.org.

Who should I call if I have more questions?
For more information about this incident call the ISMA toll free at (800) 257-4762. To take advantage of the credit protection and repair services being offered to you at no cost, enroll online at www.idexpertscorp.com/protect. To enroll, you will need the enrollment access code that is provided in your personal notification letter.

I did not receive a letter stating that my information was compromised, but feel that I should have. Can you help me?
If you are concerned that you should have received a letter, please call the ISMA toll free at (800) 257-4762.

Is this related to the Anthem cyber attack?
No. This ISMA incident involved the random physical theft of computer equipment. Anthem's incident is reported to have involved computer hackers who broke into their system electronically. There is no known connection between those two incidents. However, the ISMA's insurance is through Anthem, so there is likely overlap between the groups of people affected.

Copyright: Information written and displayed on www.ismanet.org is the property of ISMA and may not be reproduced without expressed written permission of the Indiana State Medical Association.

For a more detailed sitemap click here.