2 health data breaches hit Florida Blue, Aegis Medical members

Nov. 9--Magellan Health, a managed care insurance company and pharmacy benefit manager, said on Friday that an anonymous, unauthorized third party had accessed the email account of one employee who handles Florida Blue members' data.

The phishing scam happened on May 28 and the company found out about it on July 5. Florida Blue was alerted on Sept. 25.

The company said it has notified impacted Florida Blue members.

Magellan said the purpose of the scam was to send out email spam and not to view or access contents of the emails.

The personal information of Florida Blue members may have been accessed, including their name, date of birth and member ID, the company said.

But it added that "a third-party expert assisted the company in the investigation, which found no evidence that the unauthorized third party actually accessed, viewed or attempted to use the information in the employee's email account. It also found no compromise or unauthorized intrusion into any other information systems of the company that contained the personal information of Florida Blue members," Magellan said in a news release.

Also on Friday, Aegis Medical Group in Lake County said that an employee, who has since been fired, inappropriately accessed account information of some patients and tried to sell the personal information, including names and social security numbers, of at least two patients to third parties in an attempted identity theft or financial fraud.

The improper access occurred between July 24 and Sept. 9.

Aegis said patients how may have been affected have been notified.

The company advised the notified patients to monitor their bank accounts and credit cards, place fraud alerts with the credit bureaus and create an Identity Theft Report by filing a complaint with the Federal Trade Commission and local police departments.

___

(c)2019 The Orlando Sentinel (Orlando, Fla.)

Visit The Orlando Sentinel (Orlando, Fla.) at www.OrlandoSentinel.com

Distributed by Tribune Content Agency, LLC.