Renaissance Life & Health Insurance Company of America experienced a data breach incident by its third-party vendor Secure Administrative Solutions LLC that impact the privacy of certain individuals' protected health information.
SAS reported that the incident resulted in the exfiltration of certain protected health information related to SAS' clients.
The investigation determined that the impacted data included a combination of certain individuals' names, addresses, dates of birth, health insurance policy numbers, and other health insurance information.
They changed all system and user passwords, increasing password complexity, implementing stronger controls over historical password use, migrating all users to Microsoft Office 365, implementing multi-factor authentication for access to Microsoft Office 365, deploying new PCs to all users, and providing training on new security protocols.
They also offered affected individuals access to 12 months of complimentary credit monitoring and identity restoration services through TransUnion.
TPRM report: https://scoringcyber.rankiteo.com/company/renaissancebenefits
"id": "ren164510223",
"linkid": "renaissancebenefits",
"type": "Data Leak",
"date": "07/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Health Insurance',
'name': 'Renaissance Life & Health Insurance Company '
'of America',
'type': 'Insurance Company'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Dates of Birth',
'Health insurance policy numbers',
'Other health insurance '
'information']},
'description': 'Renaissance Life & Health Insurance Company of America '
'experienced a data breach incident by its third-party vendor '
'Secure Administrative Solutions LLC that impacted the privacy '
"of certain individuals' protected health information.",
'impact': {'data_compromised': 'Protected health information'},
'post_incident_analysis': {'corrective_actions': ['Offered affected '
'individuals access to 12 '
'months of complimentary '
'credit monitoring and '
'identity restoration '
'services through '
'TransUnion']},
'response': {'containment_measures': ['Changed all system and user passwords',
'Increased password complexity',
'Implemented stronger controls over '
'historical password use',
'Migrated all users to Microsoft Office '
'365',
'Implemented multi-factor '
'authentication for access to Microsoft '
'Office 365',
'Deployed new PCs to all users',
'Provided training on new security '
'protocols']},
'title': 'Data Breach at Renaissance Life & Health Insurance Company of '
'America',
'type': 'Data Breach'}