Did You Enroll in CareFirst’s Online Policyholder Services Before June 20, 2014?
If you answered YES, then you are among the approximately 1.1 million victims of the latest incidence of cyberattack on a health insurance company.
CareFirst announced today that cyberattackers gained limited, unauthorized access to a customer database on June 19, 2014.
We are working closely with CareFirst to understand the full implications of the breach.
Here’s what we know so far:
- The hacked CareFirst database contained only limited personal information — no social security numbers, medical claims information, credit card, or financial information was stolen.
- The attack affects only those CareFirst members who registered to use CareFirst online services through www.carefirst.com prior to June 20, 2014. If you signed up on or after June 20, 2014 your data was not compromised.
- If you are affected, you will receive a notification from CareFirst by mail in the next 1 to 3 weeks. Please be wary of any unsolicited phone calls or emails claiming to be from CareFirst.
- You will be offered two free years of credit monitoring and identity theft protection through ProtectMyID.
- You can visit CareFirst’s dedicated public website — http://carefirstanswers.com/ — to get more details and information about the attack and how it may impact you.
Please know we will continue to stay apprised of the situation as it unfolds. If you have any questions, we will do our best to answer them. Give us a call at 703-707-8270.
