Capitol Administrators, Inc. Identifies and Addresses Privacy Incident
Summary
On March 30, 2018, Capitol concluded its investigation of a suspected email phishing incident with the assistance of a leading cyber security firm.The investigation determined that an unauthorized individual accessed certain emails and attachments in a small number of Capitol employees email accounts that contained member information provided to Capitol in connection with their group health plans.While the investigation could not determine if the attachments to the emails had been opened by the unauthorized person that possibility could not be ruled out.Out of an abundance of caution, Capitol began notifying the potentially affected individuals on May 11, 2018.Capitol has taken various steps to enhance its existing network and email security, including implementing multi-factor authentication and upgrading its security center, as well as providing education and training to its employees to help prevent a similar incident from happening in the future.