Login NowClose 
Sign In to newsexaminer.com           
Forgot Password
or if you have not registered since 8/22/18
Click Here to Create an Account
Close

School Trust notifies participants of possible information breach

East Central Indiana School Trust has mailed letters to participants whose information may have been involved in a recent phishing email incident.

ECIST is a self-funded insurance trust, which consists of member schools within the East Central Educational Service Center as well as ECESC itself (the Trust “Members”). ECIST assists its member schools with providing their employees’ health insurance benefits. To accomplish this function, ECIST receives necessary data about policy participants, including certain types of personal information.

ECIST’s ongoing investigation into a phishing email incident recently determined that an unauthorized person had obtained access to an email account belonging to an ECIST employee. Upon first learning of the incident, ECIST secured the employee’s email account, launched an investigation to determine the nature and scope of the incident, and a computer security firm was engaged to assist. The investigation determined that an unauthorized person had access to the employee’s account from May 19 to May 22, 2019.

Through the investigation, ECIST identified certain messages in the account that may have been viewed by the unauthorized person. ECIST conducted a comprehensive search of those messages and determined on July 5, 2019, that certain emails or attachments reflected information related to the services it performs as a trust, including information on some of its members’ employees and their dependents. The information may have included names, dates of birth, Social Security numbers, drivers’ license numbers, medical information, prescription information, and/or health insurance information.

ECIST began mailing letters on Sept. 3. to those whose information was found in the account. For individuals whose Social Security or driver’s license number was contained in the email account, ECIST is offering complementary credit monitoring and identity protection services.

ECIST also recommends that individuals review any billing or explanation of benefits statements they receive from their health insurers or healthcare providers. If individuals see services they did not receive, they should contact the insurer or provider immediately.

To help prevent something like this from happening in the future, ECIST is implementing additional procedures to expand and strengthen its security processes and providing continued education and training to its staff.

ECIST has established a dedicated call center to answer any questions individuals have about the incident. People with questions may call the call center 1-844-644-4305, from 8 a.m.-5 p.m. 

– Provided by East Central Indiana School Trust