Florida Healthy Kids Corp, a children Medicaid health plan based in Tallahassee has discovered that it has been victim to a 7-year data breach. The health plan was first notified of the breach on 9th December 2020 and soon after launched an investigation into it. During the investigation, they found that there had been “significant vulnerabilities” in their website and databases which support the online children health insurance application since 2013. The vulnerabilities in their services began in November 2013 and were discovered in December 2020, which was when the health plan temporarily shut down their website. Members of the health plan were only notified on the breach on 27th January 2021.
Following the investigation into the breach, the health plan has discovered that around several thousand of their applicants’ data was accessed and tampered with. Applicant’s full names, birth dates, addresses, social security numbers and financial information were all accessed in the breach.