2023 Bitmarck — 330K+ policyholders, 80 insurers
Data compromised
Names, DOB, insurance card IDs
Technical writeup
IT provider for 80 health insurers. Stolen credentials, no 2FA. Names, DOB, insurance IDs on dark web. April/May: second incident, systems shut down, healthcare IT disrupted.
Root cause
Credential theft; lack of 2FA