2012 — Cigna: On March 23, 2012, an employee sent an unencrypted…
Data compromised
Personal information
Technical writeup
On March 23, 2012, an employee sent an unencrypted document to the personal emails of herself and her son. The document contained the first names of customers and their Social security numbers. Cigna became aware of the incident on March 27 and took immediate action. The employee claimed that she had sent the document to obtain help with work from her son. She confirmed that both she and her son had deleted the email and was fired.
Root cause
Insider