Dec. 5, 2018

Anthem Data Breach Class-action Lawsuit Settlement

Applies to: All Markets

On Jan. 29, 2015, Anthem learned it had been the victim of a sophisticated external cyber-attack. The cyber-attackers tried to obtain certain private information (but not medical information such as claims, diagnostic codes or test results) about individuals located in an Anthem database.

Following Anthem’s Feb. 4, 2015, announcement about the cyber-attack, multiple class-action lawsuits related to how the cyber-attack occurred and how Anthem responded were filed against Anthem and other defendants in various jurisdictions.

Anthem and the other defendants have announced a settlement to resolve the class-action lawsuit. As part of the settlement, a Settlement Administrator is distributing settlement postcards, emails or other notices to individuals whose personal information was or may have been impacted in the Anthem 2015 cyber-attack, or, to individuals who previously received a notice relating to the cyber-attack.

As part of this resolution, class members can receive an additional two years of credit monitoring and identity protection services and other benefits. Members eligible for settlement payments will receive check payments or PayPal distributions, depending on the method of payment they requested. Sample materials are included in these talking points so that you can help members who may have questions about what they received.

The best resource for our members or groups to contact for information about the settlement is the Settlement Administrator Kurtzman, Carson Consultants (KCC), which set up a website at DataBreach-Settlement.com with information about the Settlement. A member or group may also call 855-636-6136, or write to: In re Anthem, Inc. Data Breach Litigation Settlement Administrator, P.O. Box 404012, Louisville, KY 40233-9821.

You can use the FAQs below to assist members or groups who have questions about the Anthem Class-action Lawsuit settlement.

FAQs

Q: Is this another data breach?
A: No. The recent letter, email or payment from Anthem is related to the cyber-attack Anthem learned about on Jan. 29, 2015.

Q: What is the lawsuit about?
A: On Jan. 29, 2015, Anthem learned it had been the victim of a sophisticated external cyber-attack. The cyber-attackers tried to obtain certain private information (but not medical information such as claims, diagnostic codes or test results) about individuals in an Anthem database. Following Anthem’s Feb. 4, 2015, announcement about the cyber-attack, multiple class-action lawsuits related to how the cyber-attack occurred and how Anthem responded were filed against Anthem and other defendants in various jurisdictions.

The best resource for you to contact for information about the lawsuit and settlement is the Settlement Administrator Kurtzman, Carson Consultants (KCC), which set up a website at DataBreach-Settlement.com with information about the Settlement. Visit DataBreach-Settlement.com. You may also call 855-636-6136, or write to: In re Anthem, Inc. Data Breach Litigation Settlement Administrator, P.O. Box 404012, Louisville, KY 40233-9821. If you contact Anthem directly, Anthem’s customer service representatives may refer you to KCC depending on your needs.

Q: Why is there a settlement?
A: Anthem and the other defendants in the lawsuit agreed to conclude this litigation following extensive negotiations regarding the issues presented in this lawsuit and have agreed to a resolution that provides benefits to individuals whose data was or may have been involved in the cyber-attack and who are now members of the settlement class.

Q: What if I have more questions about the settlement?
A: The best resource for you to contact for information about the settlement is the Settlement Administrator Kurtzman, Carson Consultants, (KCC), which set up a website at DataBreach-Settlement.com with information about the Settlement. Visit DataBreach-Settlement.com. You may also call 855-636-6136, or write to: In re Anthem, Inc. Data Breach Litigation Settlement Administrator, P.O. Box 404012, Louisville, KY 40233-9821.

If you contact Anthem directly, Anthem’s customer service representatives may refer you to KCC depending on your needs.

Q: What does the settlement provide?
A: Anthem established a $115 million fund to settle the lawsuit. This fund will be used to pay for a variety of services, costs and fees associated with the lawsuit and settlement, including: at least two years of credit services, which includes credit bureau protection, identity theft monitoring, identity theft insurance, and assistance with fraud, for class members who request such services; and compensation for class members who already have credit monitoring and do not request the credit services Anthem is offering to class members.

The best resource for you to contact for information about the settlement is the Settlement Administrator Kurtzman, Carson Consultants, (KCC), which set up a website at DataBreach-Settlement.com with information about the Settlement. Visit DataBreach-Settlement.com. You may also call 855-636-6136, or write to: In re Anthem, Inc. Data Breach Litigation Settlement Administrator, P.O. Box 404012, Louisville, KY 40233-9821. You will be able to obtain more information on the disbursement and use of the settlement fund, including how to register for the offered Credit Services and how to submit claims for Out-of-Pocket Costs or alternative compensation, from DataBreach-Settlement.com.

Q: I’m tired of getting all these follow-up mailings related to Anthem’s cyber-attack. I don’t care about it all. Can you please just take me off the mailing lists for future mailing?
A: The Settlement Agreement requires the Settlement Administrator to keep you apprised of your rights and any updates related to the settlement.

Q: Who do I go to for questions about the settlement?
A: The best resource for you to contact for information about the settlement is the Settlement Administrator Kurtzman, Carson Consultants, (KCC), which set up a website at DataBreach-Settlement.com with information about the Settlement. Visit DataBreach-Settlement.com. You may also call 855-636-6136, or write to: In re Anthem, Inc. Data Breach Litigation Settlement Administrator, P.O. Box 404012, Louisville, KY 40233-9821.

If you contact Anthem directly, Anthem’s customer service representatives may refer you to KCC depending on your needs.

Q: Who is providing the credit services offered as a part of the Settlement Agreement?
A: Experian, which is one of the three major credit bureaus, is providing credit monitoring and identity-theft protection services offered under the Settlement.

Q: Is it single bureau? Or tri-bureau?
A: Triple-bureau credit monitoring will be available for individuals who enroll.

Q: When and how can I enroll?
A: Enrollment information can be found in the notices being disseminated by the Settlement Administrator. Please go to DataBreach-Settlement.com for more information, or call 855-636-6136 or write to: Settlement Administrator, In re Anthem, Inc. Data Breach Litigation, P.O. Box 404012, Louisville, KY 40233-9821.

Q: If I signed up my minor for Anthem’s Minor Credit Freeze Program, should I still sign up my minor for these services now?
A: If you placed a minor credit freeze or received reimbursement for a credit freeze through the Anthem Minor Credit Protection Program, it is your decision as to whether you should also enroll your minor in the Credit Services through Experian. The additional credit services offered as part of the Settlement Agreement are not the same as a credit freeze, and instead are focused on credit bureau monitoring, identity-theft insurance, monitoring the dark web and assistance with credit repair and fraud resolution. They are also being offered for the benefit of you and your minor children and are offered as a part of the Settlement at no cost to you.

Q: I received a check/PayPal payment/letter/email about this and I think it is a scam. Can you tell me if it is a legitimate notice?
A:
We do have samples of the legitimate communications some members may receive about the settlement: