INSIDE JOB AT BLUE CROSS BLUE SHIELD RACKED UP $742,000 WORTH OF SAM’S CLUB ITEMS
INSIDE JOB AT BLUE CROSS BLUE SHIELD RACKED UP $742,000 WORTH OF SAM’S CLUB ITEMS
INSIDER ATTACK; STOLEN CREDENTIALS; UNAUTHORIZED USE OF USER PRIVILEGES; UNAUTHORIZED USE OF EMPLOYER’S DATA; USER ACCOUNTS COMPROMISED
A former customer service representative at Blue Cross Blue Shield of Michigan was part of an identity theft scheme that led to significant credit card fraud.
For years, BCBSM employee Angela Patton had an agreement with accomplices "whereby she received payments in exchange for obtaining and disclosing individually identifiable health information of patients covered by health plans administered by BCBSM,” according to an indictment.
Patton printed out screenshots of the data, which were sold to the conspirators for use in ID theft and credit fraud.
The indictment states Patton "had access to the [company's] computer system and databases and had received training in and became familiar with her obligations of confidentiality under the HIPAA regulations." It notes that Patton was authorized by BCBSM "to access individually identifiable health information of patients who received health coverage from health plans administered by BCBSM, for only such purposes as permitted by the HIPAA regulations."
The nicked information was used to create counterfeit credit cards and open lines of credit in the victims' names at a number of retail chains. Those retailers included Lowe's, Cabela and Sam's Club.
Hundreds of thousands of dollars' worth of merchandise was fraudulently purchased, including more than $742,000 spent at Sam's Club.
The personal information exploited during the scheme included names, addresses and Social Security numbers of Blue Cross Blue Shield members. Police in several states discovered the stolen BCBSM subscriber information in hotels, homes and vehicles of the various defendants.
In a March 10 statement, BCBSM said the company has begun notifying victims.
http://www.nextgov.com/cybersecurity...article_module
11 charged with stealing, fraudulently using Blue Cross Blue Shield subscriber inform
11 charged with stealing, fraudulently using Blue Cross Blue Shield subscriber information
Ex-BCBS employees accused of taking screenshots of personal information
Author: Local 4 - ClickOnDetroit news staff, local4@clickondetroit.com
Published On: Mar 10 2015 02:28:03 PM
Ex-Blue Cross employees accused of identity theftt
DETROIT -Eleven people are facing federal charges for allegedly stealing and fraudulently using the personal information of Blue Cross Blue Shield subscribers.
According to the indictment released Tuesday, Angela Patton, who worked for Blue Cross Blue Shield of Michigan (BCBSM), printed screenshots containing subscribers’ profiles, including personal identifying information, and gave them to other individuals who used the information to apply for credit in other people’s names and purchase merchandise in stores across the country.
Authorities said co-conspirators arrested in Texas, Ohio and Michigan were in possession of BCBSM screenshots coming from Patton’s work computer as well as counterfeit identification cards and credit cards in the names of individual subscribers whose personal information was included in the screenshots.
Agents executing search warrants at suspects' homes in metro Detroit recovered additional screenshots that included personal information belonging to thousands of BCBSM and Blue Care Network subscribers.
The information included individuals’ names, dates of birth and Social Security numbers. Counterfeit and re-encoded credit cards and gifts cards were also recovered.
The indictment alleges that three of the suspects who used counterfeit credit cards at different major stores and warehouses fraudulently obtained more than $742,000 worth of merchandise from Sam’s Club alone.
Named in the indictment were:
- Angela Denise Patton, 47, of Belleville, Michigan
- Sam Oscar Patton, 47, of Dearborn, Michigan
- Dontez Patton, 23, of Woodhaven, Michigan
- Johnathon Weston, 24, of Detroit
- Charlie Smith, 47, of Detroit
- Thomas Turner, Sr., 47, of Detroit
- Aramona Coleman, 56, of Southfield, Michigan
- Tynekwa Hill, 26, of Pontiac, Michigan
- Jeffrey Morton, 41, of Oak Park, Michigan
- Verdell Kennedy, 45, of Detroit
- Raymond Thomas, 40, of Oak Park, Michigan
BCBS ID Theft Indictment
Statement from Blue Cross Blue Shield of Michigan:
Corporate investigators from Blue Cross Blue Shield of Michigan played an active role in a federal law enforcement investigation resulting in the arrests today of 11 individuals in southeastern Michigan for alleged identity theft.
The arrested individuals possessed the personal information of 5,514 Blue Care Network and Blue Cross Blue Shield of Michigan members in printouts captured from the companies’ information systems. A former employee of BCBSM was among those arrested.
“We are pleased that assistance provided by our company’s investigative team was used to secure the arrest of these individuals, including our former employee,” said Daniel J. Loepp, president and CEO of BCBSM. “I am personally saddened by this former employee’s involvement. Their alleged behavior in no way represents the ethical standards brought to work every day by our more than 7,000 employees, who are committed to serving our members with integrity and honesty.”
Affected members will be contacted by letter and offered two years of free credit protection services. To further protect their personal information, BCBSM recommends members carefully monitor their Explanation of Benefits statements and financial accounts for services they did not receive or any inappropriate or suspicious healthcare claims. In the event that they notice any inappropriate activity on their Explanation of Benefits statements, BCBSM and BCN ask members to contact the companies’ Anti-Fraud Hotline at 800-482-3787, between 8:30 a.m. and 4:30 p.m. Monday through Friday.
“Blue Cross and BCN are committed to protecting our members’ personal information,” said Kevin Klobucar, CEO for Blue Care Network. “We have taken a number of deliberate steps to further secure our members’ information from disclosure, including limiting access to members’ Social Security numbers, requiring all employees to change their passwords, and installing new printing devices that require employees to scan their coded badges to print.”
