- Customer information stolen from BlueCross BlueShield of Tennessee
- Thieves took 57 hard drives containing 300,000 images, and 50,000 hours of recorded phone calls
- Company defends decision not to contact customers until extent of data theft is known
Scott.Noll@wreg.com
( Memphis 11/25/2009) It's tense tense times for millions of people across Tennessee, after thieves steal computer drives with personal information from an insurance giant.
Now, that insurance company is defending its handling of the situation.
BlueCross BlueShield of Tennessee sent a letter to group administrators last week, telling them of the thefts.
But if you're one of the 3.1 million people insured by the company, you haven't received a thing yet, warning you that your information could be in the hands of criminals.
BlueCross BlueShield of Tennessee says thieves stole 57 hard drives from an on-site office in Chattanooga.
In the process, those thieves personal information including members' names, identification and social security numbers, dates of birth, and medical treatment information at-risk.
"That is scary stuff," said Michael Thron, a customer of the insurance company's.
"That's not good," added Jellory Stokes, another customer from Memphis. "That's not good at all."
No one we talked with locally who is insured by the company knew their information could have been compromised, despite the fact the break-in happened nearly two months ago.
"That does seem like a long time," said Thron when he learned about the date.
A spokeswoman for the Chattanooga-based insurer says because the company is still trying to figure out what information was taken, and how many people are affected, it opted against sending out letters to all customers.
"We felt that a blanket announcement going to people that may not have been impacted would have caused undo concern," said BlueCross BlueShield of Tennessee spokesperson Mary Thompson.
While the company insists it doesn't know how many customers had information stored on the stolen hard drives, other details have emerged.
The stolen hard drives contained 300,000 screen images from customer service representatives, and were filled with another 50,000 hours of phone conversations between providers, like doctors and pharmacists, and BlueCross BlueShield.
The company plans to start notifying only customers whose info was taken, beginning November 30th.
That process is expected to take at least one month.
In the meantime, potential victims, now aware they could be vulnerable, must wait.
"Name, social security number, everything. where you live, the whole 9 yards," said Stokes reflecting on what information could now be in the hands of criminals. "They should have let us know some time ago."
Thompson says the company did post notice of the break-in on its website days after it happened.
Credit monitoring for one year will be offered to any customer who had a social security number stolen as part of the break-in.
Customers with concerns about their information can call a special hotline set up by the company, 1-88-422-2786, or e-mail Privacy_Office@bcbst.com.