BlueCross offers credit monitoring after Social Security numbers compromised

After 68 computer hard drives were stolen last month, BlueCross BlueShield of Tennessee is providing members whose Social Security numbers may be at risk with credit monitoring service for a year.

On Oct. 2, someone entered a data closet at the insurance provider's Eastgate Town Center location and removed hard drives containing encoded data.

BlueCross is assisting the criminal investigation and will retain an independent firm to perform a security assessment, the company said in a news release Monday. More than 800 staff members, a temporary staffing service and a data security contractor are working six days a week to retrieve and review back-up files, the release stated.

"This team is combing through 300,000 screen image files and reviewing 50,000 hours of audio recordings stored on the stolen drives to determine the exact data at risk," according to the release.

Spokeswoman Mary Thompson said the company is committed to helping members secure any information that may be compromised.

"We obviously take great concern for the privacy and security of our members' personal health information," she said. "So if a member's potential information is found to be compromised, we want to extend credit monitoring to them."

Chattanooga police continue to pursue leads in the case, hoping the hard drives will show up when someone attempts to sell or discard them.

"It's highly specialized equipment that not everybody could use," said Capt. Ken Neblette, commander of the department's criminal investigation division.

On Friday, the company alerted clients via Priority Mail that some members' personal information is contained in the hard drives. Company or group administrators received letters from Tena Roberson, the deputy general counsel and chief privacy officer for BlueCross.

"The call recordings may have included the member's name and ID number," wrote Ms. Roberson. "Additionally, some recordings may have included the member's date of birth or Social Security number."

Letters to affected members are expected to be sent beginning Monday, notifying them their Social Security numbers were included in the stolen data and they can receive free Equifax credit monitoring for a year, the company said.

The company also established a hotline to handle questions and bolstered security at all facilities by adding video camera surveillance, reviewing card access readers and increasing the number of security personnel, officials said.