Florida Healthy Kids Data Hacked

February 1, 2021

Floridians who were enrolled or applied for coverage from a children’s health insurance program between 2013 and 2020 are being urged to take steps to protect their finances after a cyber attack.

Florida Healthy Kids says a vendor, Jelly Bean Communications Design, experienced a cybersecurity incident. The company hosted the FHKC website at the time of the incident. The security incident involved the personal data of online applicants and enrollees. FHKC has no confirmation at this time that anyone’s personal information was removed from the system.

FHKC was notified that several thousand applicant addresses had been inappropriately accessed and tampered with. These addresses are collected as part of the online Florida KidCare application. FHKC engaged independent cybersecurity experts to conduct a thorough review of the incident to confirm the scope and severity of the security incident.

The cybersecurity experts identified significant vulnerabilities in the hosted website platform and the databases that support the online Florida KidCare application

The tampering of applicant addresses, together with the potential exposure of personal information dating back to November 2013, constitutes a reportable data breach under Florida and federal law.

The types of information that may have been exposed include:

  • Full Name and Date of Birth
  • Email Address and Telephone Number
  • Physical Address and Mailing Address, if different
  • Social Security Number
  • Financial Information, to include wages, alimony, child support, royalties, other income, and tax deductions
  • Family relationships of those individuals included on the Florida KidCare Application (i.e. mother of child, sister/brother of applicant, etc.)
  • Secondary Insurance Information

What Consumers Can Do To Protect Themselves

Individuals who applied or enrolled with Florida KidCare coverage between November 2013 – December 2020 are encouraged to take readily available steps to protect themselves from potential harm, including:

  • Fraud alerts – Fraud alerts are a free service offered by all three national credit reporting agencies (Experian, Equifax and TransUnion) and requires potential creditors to contact an individual before any new account is opened. Fraud alerts remain in place for one year, and consumers only need to contact one credit agency for all three credit agencies to place a fraud alert on an account.
  • Security freezes – Security freezes are beneficial tools for parents to protect children who have no need for credit accounts. A security freeze, also known as a credit freeze, is the best way to prevent new accounts from being opened without a person’s permission. It is a free service offered by all three national credit reporting agencies (Experian, Equifax and TransUnion) that prevents new credit accounts from being opened under someone’s name without written authorization. Be aware that a security freeze will impact the ability to apply for new credit (such as a car loan, home loan, credit card, etc.). Unlike a fraud alert, consumers must contact each credit reporting agency separately to set up a security freeze.
  • Monitoring – Close monitoring of all credit card, bank, and credit agency reports for any unusual activities is recommended. For additional information on how to protect one’s identity and to report identity theft, visit the Federal Trade Commission’s website at www.ftc.gov.

To set up a fraud alert or security freeze, contact the three national credit reporting agencies below:

Equifax: 1-800-525-6285; www.equifax.com
Experian: 1-888-397-3742; www.experian.com
TransUnion: 1-800-680-7289; www.transunion.com

The Florida Healthy Kids Corporation is a nonprofit, public-private partnership created by the Florida Legislature to expand access to affordable, child-centered health insurance

Comments

Comments are closed.

Written by William Reynolds · Filed Under News