Open enrollment leaves payers vulnerable to cyberattacks

Just as hackers target credit card data during days like Black Friday when transactions spike, the open enrollment period creates a cybersecurity threat for insurers taking in large amounts of new information, according to Benefits Pro.

The healthcare industry was ranked as the number one target for cyberattacks in 2015, but the least prepared to manage those attacks. A recent survey by the Ponemon Institute found that nearly half of all healthcare organizations endured a breach involving exposure of patient information in the last year.

Since criminals place a premium on new data, insurers are likely to see increased attacks during the three-month window when an influx of new information is exchanged when consumers alter their health coverage or purchase new plans. Given the history of attacks in other industries during times of high data exchange, the open enrollment period offers an ideal opportunity for hackers.

According to Benefits Pro, organizations can take two steps to limit vulnerabilities during this time frame:

  • Don’t store personally identifiable information if you don’t need it
  • If you do need it, make sure it’s encrypted

Previous reports have recommended a three-pronged approach to dealing with cyberattacks that focus on prevention and response.

- read the Benefits Pro article