Renaissance Life & Health Insurance Company of America experienced a data breach incident by its third-party vendor Secure Administrative Solutions LLC that impact the privacy of certain individuals' protected health information.
SAS reported that the incident resulted in the exfiltration of certain protected health information related to SAS' clients.
The investigation determined that the impacted data included a combination of certain individuals' names, addresses, dates of birth, health insurance policy numbers, and other health insurance information.
They changed all system and user passwords, increasing password complexity, implementing stronger controls over historical password use, migrating all users to Microsoft Office 365, implementing multi-factor authentication for access to Microsoft Office 365, deploying new PCs to all users, and providing training on new security protocols.
They also offered affected individuals access to 12 months of complimentary credit monitoring and identity restoration services through TransUnion.
"id": "REN164510223",
"linkid": "renaissancebenefits",
"type": "Data Leak",
"date": "07/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"