Anthem cybersecurity breach underscores need to plan incident response

The apparently sophisticated attack on health insurance company Anthem is a chilling reminder that cyber-incidents can occur anytime to anyone. The health care industry may be especially vulnerable; after all, health records are worth more to hackers than is credit card information.

But what Anthem did — and what you can do, too — was to take steps to prepare for a breach and be ready to respond quickly with a plan of action. The implications of the incident are still playing out, but Anthem’s handling of the situation has earned positive comments from HITRUST. They believe that Anthem’s “adoption of strong information security controls” and cyber preparedness “were crucial in their ability to detect, analyze, remediate and collaborate swiftly and effectively.”

The message is clear: implementing a robust incident response plan can minimize the damage of a cyberattack, which in this day and age seems inevitable.

Is your organization ready to handle a cybersecurity breach? Our article, “Unprepared organizations pay more for cyberattacks,” recommends four steps to prepare your company for an incident. Talk with one of our cybersecurity and privacy professionals to help you create your plan. We understand the complexities and acute needs of the health care industry. Let us help you prepare.


David Reitzel
Health IT Leader
T +1 312 602 8531
Kevin Morgan
Business Advisory Services
T +1 203 327 8295