Re: Anthem Healthcare Hacked

2015-02-08 Thread Tom Brennan
More bits and pieces of information in this report, but nothing that really tells me if a mainframe was involved. http://www.usatoday.com/story/tech/2015/02/07/anthem-hack-80-million-lawsuits-data-privacy/23037879/ -- For IBM-MA

Re: Anthem Healthcare Hacked

2015-02-08 Thread David Cole
to December >> >> >> Follow-up article with more details: >> >> http://www.net-security.org/secworld.php?id=17923 >> >> >> Thanks, >> Mark Regan, USNR-Ret, 1969-1991 >> <>< >> >> >> - Forwarded Message - >

Re: Anthem Healthcare Hacked

2015-02-08 Thread Anne & Lynn Wheeler
hed value is secured since there is no way to unhash > it since all that is needed is to hash the value you think it is and > compare the two hashes. re: http://www.garlic.com/~lynn/2015.html#96 Anthem Healthcare Hacked an issue is "something you know" shared secrets for authenticati

Re: Anthem Healthcare Hacked

2015-02-08 Thread Robert A. Rosenberg
At 11:00 +0800 on 02/08/2015, Timothy Sipples wrote about Re: Anthem Healthcare Hacked: Tom Brennan writes: Maybe someone can tell me what difference it makes whether the data was encrypted on disk or not (as some news reports are talking about). I mean, if I do a SELECT * from an admin id I

Re: Anthem Healthcare Hacked

2015-02-07 Thread Tony Harminc
On 7 February 2015 at 22:00, Timothy Sipples wrote: > I'm assuming customers use IBM mainframes and use these wonderful > capabilities (and others) IBM provides. Big assumptions, sadly violated too > often. Now it's (sadly) a "violation" to not use an IBM mainframe?! I know IBM has top lawyers an

Re: Anthem Healthcare Hacked

2015-02-07 Thread Sam Siegel
According to Anthem's website, it was formed by the merger of Wellpoint and Anthem. According to http://mainframes.wikidot.com/, Wellpoint is a mainframe shop. Hopefully as additional details will become available. It seems, that unless you are in the know, which I'm not, that facts are in short

Re: Anthem Healthcare Hacked

2015-02-07 Thread Jake anderson
One of an article says the hack assumingly happened from an external Web storage. So not a mainframe ? Jake On 8 Feb 2015 08:31, "Timothy Sipples" wrote: > Tom Brennan writes: > >Maybe someone can tell me what difference it makes whether the data was > >encrypted on disk or not (as some news re

Re: Anthem Healthcare Hacked

2015-02-07 Thread Timothy Sipples
Tom Brennan writes: >Maybe someone can tell me what difference it makes whether the data was >encrypted on disk or not (as some news reports are talking about). I >mean, if I do a SELECT * from an admin id I must be going through the >decrypt process, right? No, that's not a given. Many financial

Re: Anthem Healthcare Hacked

2015-02-06 Thread Anne & Lynn Wheeler
Anthem's stolen customer data not encrypted; But under federal law, health insurance companies don't have to encrypt user data. http://www.cnet.com/news/anthems-hacked-customer-data-was-not-encrypted/ In early part of century, I was co-author of financial industry privacy standard ... and we had s

Re: Anthem Healthcare Hacked

2015-02-06 Thread Mike Schwab
;> >> >> Thanks, >> Mark Regan, USNR-Ret, 1969-1991 >> <>< >> >> >> - Forwarded Message - >> From: Mark Regan >> To: IBM Mainframe Discussion List >> Cc: >> Sent: Friday, February 6, 2015 7:51 AM >> Subj

Re: Anthem Healthcare Hacked

2015-02-06 Thread Tony Harminc
On 6 February 2015 at 15:47, Jousma, David wrote: > I'll be honest. I do not understand the need for encryption at the disk > hardware control unit level. I get it for tape, if tape is being > transported, or handled by humans. Seems like that would *only* protect data > if the DASD box was

Re: Anthem Healthcare Hacked

2015-02-06 Thread Longabaugh, Robert E
t: Re: Anthem Healthcare Hacked I'll be honest. I do not understand the need for encryption at the disk hardware control unit level. I get it for tape, if tape is being transported, or handled by humans. Seems like that would *only* protect data if the DASD box was being transported som

Re: Anthem Healthcare Hacked

2015-02-06 Thread Jousma, David
429 f 616.653.2717 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tony Harminc Sent: Friday, February 06, 2015 3:34 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Anthem Healthcare Hacked On 6 February 2015 at 14:22, Tom Brennan wrote: &g

Re: Anthem Healthcare Hacked

2015-02-06 Thread Tony Harminc
On 6 February 2015 at 14:22, Tom Brennan wrote: > Maybe someone can tell me what difference it makes whether the data was > encrypted on disk or not (as some news reports are talking about). I mean, > if I do a SELECT * from an admin id I must be going through the decrypt > process, right? So it

Re: Anthem Healthcare Hacked

2015-02-06 Thread Tom Brennan
I believe they do have mainframes - but I haven't yet seen anything indicating whether this is mainframe, unix, windows, or what. The only detail I saw reported (which may or may not be true) was that a database admin saw his id being used for things he did not initiate. So if we assume the h

Re: Anthem Healthcare Hacked

2015-02-06 Thread David Cole
ark Regan, USNR-Ret, 1969-1991 <>< - Forwarded Message - From: Mark Regan To: IBM Mainframe Discussion List Cc: Sent: Friday, February 6, 2015 7:51 AM Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-custome

Re: Anthem Healthcare Hacked

2015-02-06 Thread Peter
t; > > Thanks, > Mark Regan, USNR-Ret, 1969-1991 > <>< > > > - Forwarded Message - > From: Mark Regan > To: IBM Mainframe Discussion List > Cc: > Sent: Friday, February 6, 2015 7:51 AM > Subject: Anthem Healthcare Hacked > > > http://w

Re: Anthem Healthcare Hacked

2015-02-06 Thread Aled Hughes
Feb 2015 12:51 Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-customers-/d/d-id/1318979 Watch the wrap. Are they a mainframe shop? Thanks, Mark Regan, USNR-Ret, 1969-1991 <>< --

Re: Anthem Healthcare Hacked

2015-02-06 Thread Mark Regan
6, 2015 7:51 AM Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-customers-/d/d-id/1318979 Watch the wrap. Are they a mainframe shop? Thanks, Mark Regan, USNR-Ret,

Anthem Healthcare Hacked

2015-02-06 Thread Mark Regan
http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-customers-/d/d-id/1318979 Watch the wrap. Are they a mainframe shop? Thanks, Mark Regan, USNR-Ret, 1969-1991 <>< -- For IBM-MAIN subsc