{"id":3327,"date":"2024-04-29T14:46:08","date_gmt":"2024-04-29T19:46:08","guid":{"rendered":"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers"},"modified":"2024-04-29T14:46:08","modified_gmt":"2024-04-29T19:46:08","slug":"13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/04\/29\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers\/","title":{"rendered":"13.4M Kaiser Insurance Members Affected by Data Leak to Online Advertisers"},"content":{"rendered":"<div class=\"media_block\"><a href=\"https:\/\/i0.wp.com\/eu-images.contentstack.com\/v3\/assets\/blt6d90778a997de1cd\/blt879b89c6945c59d9\/662ff52c49db6c329c142624\/kaiser-Wirestock_Inc.-Alamy.jpg?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers.jpg?w=640&#038;ssl=1\" class=\"media_thumbnail\"><\/a><\/div>\n<div><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers.jpg?w=640&#038;ssl=1\" class=\"ff-og-image-inserted\"><\/div>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Hard on the heels of a <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/round-2-change-healthcare-targeted-second-ransomware-attack\" rel=\"noopener\">significant data theft at UnitedHealth<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">, fellow healthcare behemoth Kaiser Permanente publicly announced a data breach affecting 13.4 million current and former insurance members.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Kaiser&#8217;s systems inadvertently shared patient data with third-party advertisers, including Google, Microsoft, and social platform X, the <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/ocrportal.hhs.gov\/ocr\/breach\/breach_report.jsf\" rel=\"noopener\">company said<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">, thanks to the presence of improperly implemented tracking code that Kaiser used to see how its members navigated through its Web and mobile sites.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">&#8220;Certain online technologies, previously installed on its websites and mobile applications, may have transmitted personal information to third-party vendors,&#8221; the company said in a <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/techcrunch.com\/2024\/04\/25\/kaiser-permanente-health-plan-millions-data-breach\/\" rel=\"noopener\">media statement<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The shared data included names, IP addresses, what pages people visited, whether they were actively signed in, and even the search terms they used when visiting the company&#8217;s online health encyclopedia.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Kaiser has reportedly removed the tracking code from its sites, and while the incident wasn&#8217;t a hacking event, the breach is still concerning from a security perspective, according to Narayana Pappu, CEO at Zendata.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">&#8220;The presence of third-party trackers belonging to advertisers, and the oversharing of customer information with these trackers, is a pervasive problem in both health tech and government space,&#8221; he explains. &#8220;Once shared, advertisers have used this information to target ads at users for complementary products (based on health data); this has happened multiple times in the past few years, including at Goodrx. Although this does not fit the traditional definition of a data breach, it essentially results in the same outcome \u2014 an entity and the use case the data was not intended for has access to it. There is usually no monitoring\/auditing process to identify and prevent the issue.&#8221;<\/span><\/p>\n<p><a href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hard on the heels of a significant data theft at<\/p>\n","protected":false},"author":12,"featured_media":3328,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-3327","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=2560%2C1471&ssl=1",2560,1471,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=300%2C172&ssl=1",300,172,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=640%2C368&ssl=1",640,368,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=640%2C368&ssl=1",640,368,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=1536%2C883&ssl=1",1536,883,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=2048%2C1177&ssl=1",2048,1177,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=1024%2C588&ssl=1",1024,588,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/13-4m-kaiser-insurance-members-affected-by-data-leak-to-online-advertisers-scaled.jpg?fit=2560%2C1471&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=3327"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3327\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/3328"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=3327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=3327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=3327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}