Under HIPAA and state breach laws, there are specific requirements for providing notice about the incident. The first communications necessary to fulfill the substitute notice requirements under the state breach law started on February 13, with the posting of the notice on AnthemFacts.com. We also emailed members who were potentially impacted and for whom we have email addresses.
We also must provide media notice, which is a requirement under HIPAA and some state laws. Our media notice has been posted on the national newswire. The notice was distributed to certain newspaper, radio, TV and magazine reporters in all 50 states. In Texas, Massachusetts, Utah and Florida, we are required to publish the notice via advertisements in certain types of publications. Massachusetts also requires that specific language is included in the ad. The ads were in the following newspapers on Monday, March 2. The Florida ads will begin on Wednesday, March 4, and the publications are still to be determined.
- The Boston Globe
- The Springfield Republic
- The Worcester Telegraph
- Austin American-Statesman
- Dallas Morning News
- Houston Chronicle
- San Antonio Express-News
The mailing of the member letters which is a required communication under HIPAA began on Monday, March 2. The ads, media notice and member letter are attached.
We will continue to keep you updated as additional information becomes available.