UnitedHealthcare insider charged in Cal data theft

By Robert McMillan, IDG News Service |  Security, data breach, identity theft Add a new comment

A former UnitedHealthcare employee has been charged with stealing customer data in connection with a rash of identity thefts at the University of California, Irvine.

Mike Tyrone Thomas Jr., 27, was arrested at his Fort Worth, Texas, home on July 7 and now faces a fraud charge in connection with a scam that hit 163 students enrolled in the university's Graduate Student Health Insurance Program. He also faces a charge of aggravated assault relating to a November 2007 incident, although it was unclear if the charges are related.

Thomas accessed the customer data, which he was not authorized to see, in late October, according to authorities. In February, U.C. Irvine graduate students started noticing that their 2007 tax returns had already been filed by someone else, apparently in the hope of collecting their tax refund checks.

At the time he allegedly accessed the data, Thomas was working for UnitedHealthcare's student resources department, a division of its Dallas group, said U.C. Irvine campus police chief Paul Henisey. He didn't know if other UnitedHealthcare customers were affected by the breach but said it's a possibility. The problem of falsified tax returns is a nationwide one and the U.S. Inland Revenue Service is investigating it, Henisey said. "I'm only assuming that the case is much bigger than our 163 graduate students," he said.

UnitedHealthcare doesn't think other customers were affected, a company spokeswoman said via e-mail. "We are outraged that a former employee may have illegally accessed information regarding certain University of California Irvine students and may have used the information for criminal purposes," she said.

Based in Minnetonka, Minnesota, UnitedHealthcare is one of the largest health care service providers in the United States.

The company has notified the 1,100 students who had their data accessed and is offering them identity theft protection services, the spokeswoman said.

With 130 million U.S. households receiving federal economic stimulus checks, scammers have been particularly aggressive this year, the IRS says.

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question