Posted on Wednesday, January 27th, 2010 at 4:15 pm
According to Blumenthal’s office, the complaint filed in U.S. District Court in Hartford marks the first time a state attorney general has invoked new authority under the American Recovery and Reinvestment Act of 2009 to pursue breaches of personal health information.
The hard drive disappeared from a Health Net office in Shelton, Conn., on May 14, 2009, and the company failed to notify the attorney general’s office and other state officials, the lawsuit alleges. The drive contained 28 million scanned unencrypted pages of documents, such as claims and membership forms, appeals, grievances and medical records, and included names, addresses, bank account numbers and Social Security numbers, according to the complaint.

