Data security

SecurityScorecard will monitor cyber risk across the insurer's IT value chain.

Whether Excellus BlueCross BlueShield learned that it had suffered a cyber attack because the organization or a contractor was looking for signs of hacking, or learned from a law enforcement agency is not clear, as the company isn’t saying much about the incident outside of formal announcements.

The insurer said it “learned that cyber attackers had executed a sophisticated attack to gain unauthorized access to our information technology systems.” The pertinent words here are “learned” and “sophisticated;” other organizations hacked have used the same terms.

Rochester, N.Y.-based Excellus Blue Cross Blue Shield was hacked at least twice going back to 2013.

American International Group Inc. and Axis Capital Holdings Ltd. are among insurers for the company that owns AshleyMadison.com, the adultery website hacked in a breach that exposed more than 37 million users, people familiar with the policies said.

The market for health insurance in the U.S. is already so highly concentrated that pending tie-ups among four of the country’s largest insurers risk hurting both consumers and doctors, the American Medical Association said.

The Canadian insurer is allowing customers and advisors to opt for voice recognition over manual password entry in the contact center.

Corporate IT has lost the battle with shadow IT, and it’s time to embrace what that means for enterprises.

To combat security issues, most organizations still depend on alerts and actual incidents. But that approach can lead to faulty data analysis.

Insurance companies face increasingly sophisticated cybersecurity challenges. Here's what leaders at major companies are doing to solve them.

What we learn about securing data and communications from the Department of Defense.

Industry experts share insurers' strengths and what still can be improved on the cybersecurity front.

Tim Callahan, chief information security officer for Aflac, talks about the benefits of attending Deloitte’s one-day CISO Transition Lab.

Security vulnerabilities exist in a number of areas; data sent from a wearable device to a nearby smartphone, for example, may be exposed during transfer via Bluetooth or WiFi connections.

Security researchers demonstrated that they could hack Metromile's UBI dongle; insurance carrier issued patch in June.

Organizations must build digital resilience to protect their most valuable information assets, says McKinsey.

The NAIC’s recent and startlingly rapid moves towards a cyber regulatory doctrine are evidence of the importance and vulnerability of cyberspace.

In a draft document, regulators propose 12 rights for policyholders around cybersecurity.

Adversaries are becoming more sophisticated not only in their approaches to launching attacks, but also in evading detection.

Smartwatches contain a range of security flaws, raising fresh concerns about wearable devices gathering and sharing big data and personal information across the Internet of Things (IoT), according to new research.