State Sen. Kevin Kelly (R-21), ranking member of the General Assembly’s Insurance and Real Estate Committee, Tuesday called for Access Health CT’s call center vendor Maximus to supply a complete account of current security policies and protocols to the legislature’s Insurance Committee. His demands are in response to the security breach uncovered on Friday.
“What disturbs me most about this situation is the timeline. The employee responsible for this egregious error did not come forward until after the news reported on the situation,” said Kelly. “I’m sure he realized almost immediately that he lost his backpack. But did he even go back to look for it? What we do know is that he did not let his supervisors know he lost highly sensitive information that jeopardized hundreds of people’s personal data. Instead, he waited over 24 hours to come forward and only after the press reported finding the backpack. The timeline raises serious questions about not only Maximus’s preventative protections, but also their crisis response procedures.”