Health insurer Anthem disclosed yesterday that hackers gained unauthorized access to its IT systems and stole personal information relating to current and former members and employees.

Calling it a “very sophisticated external cyber attack,” Antham CEO Joseph Swedish said the personal information that attackers compromised includes “names, birthdays, medical IDs, Social Security Numbers, street addresses, e-mail addresses, and employment information, including income data.” Swedish said the breach does not appear to have compromised credit card or medical information.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...