Anthem, the second largest health insurer in the nation, has agreed to pay the Department of Health and Human Services a record $16 million to settle privacy violations for a massive data breach in 2015. Personal information of roughly 79 million people, including names, birthdates, Social Security numbers and medical IDs, was compromised in the cyber attack.
Anthem also agreed to a corrective action plan under government monitoring, which involves a process for the company to assess its electronic security risks, take appropriate countermeasures and maintain ongoing surveillance.