Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Detection and Response: The company detects and responds to cybersecurity incidents through an containment measures with halted mailing process, and remediation measures with internal investigation, remediation measures with notified affected members, and recovery measures with implemented more robust quality assurance process for member communications, and communication strategy with press release, communication strategy with encouraged affected members to use free credit reporting services, communication strategy with advised reporting suspicious activity to law enforcement and ahcccs..

Common Attack Types: The most common types of attacks the company has faced is Breach.

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Health Information (Phi), Personally Identifiable Information (Pii) and .

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: internal investigation, notified affected members, .

Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by halted mailing process and .

Data Recovery from Ransomware: The company recovers data encrypted by ransomware through implemented more robust quality assurance process for member communications, .

Key Lessons Learned: The key lessons learned from past incidents are Importance of robust quality assurance processes for handling sensitive member communications, especially in email distribution systems. Human error in data handling can lead to significant privacy incidents even without malicious intent.

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Arizona Health Care Cost Containment System (AHCCCS) Press ReleaseDate Accessed: 2023-09-26, and Source: KJZZ News ReportDate Accessed: 2023-09-26.

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Press Release, Encouraged Affected Members To Use Free Credit Reporting Services and Advised Reporting Suspicious Activity To Law Enforcement And Ahcccs.

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Affected Members Notified; Encouraged To Monitor Credit Reports And Report Suspicious Activity, Press Release With Guidance On Credit Monitoring And Reporting Suspicious Activity and .

Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Implemented More Robust Quality Assurance Processes For Member Communications, .

Most Recent Incident Detected: The most recent incident detected was on 2023-09-26.

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2023-09-26.

Most Significant Data Compromised: The most significant data compromised in an incident were names, AHCCCS identification numbers, health plan names and .

Most Significant System Affected: The most significant system affected in an incident was email distribution system (Constant Contact).

Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was halted mailing process.

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were names, AHCCCS identification numbers and health plan names.

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 3.2K.

Most Significant Lesson Learned: The most significant lesson learned from past incidents was Importance of robust quality assurance processes for handling sensitive member communications, especially in email distribution systems. Human error in data handling can lead to significant privacy incidents even without malicious intent.

Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Conduct regular audits of communication processes involving sensitive data., Consider using data loss prevention (DLP) tools to monitor and block unintended disclosures of PII/PHI., Enhance staff training on data handling and privacy protocols, particularly for bulk communications. and Implement automated validation checks for email distribution lists to prevent misaddressed communications..

Most Recent Source: The most recent source of information about an incident are KJZZ News Report and Arizona Health Care Cost Containment System (AHCCCS) Press Release.

Current Status of Most Recent Investigation: The current status of the most recent investigation is internal investigation completed; corrective measures implemented.

Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was affected members notified; encouraged to monitor credit reports and report suspicious activity, .

Most Recent Customer Advisory: The most recent customer advisory issued was an press release with guidance on credit monitoring and reporting suspicious activity.