Health Net’s Costly Cybersecurity Comedy: $11M Settlement for Faking IT Compliance

HNFS and Centene Corporation will pay $11,253,400 for allegedly faking cybersecurity compliance under their TRICARE contract. Despite denying any breaches, they still agreed to settle. Apparently, avoiding outdated tech and managing passwords were too high-tech for them. Who knew securing military data could be so… optional?

Hot Take:

Ah, nothing screams “Oops, we did it again!” quite like a hefty $11 million settlement for playing fast and loose with cybersecurity compliance. HNFS and Centene Corporation are now paying for their magical disappearing act of security measures, proving once again that you can’t just wish upon a compliance star without some serious repercussions. Who knew that a game of cybersecurity hide-and-seek could be this costly?

Key Points:

  • Health Net Federal Services and Centene Corporation settled for $11,253,400 over cybersecurity compliance allegations.
  • HNFS allegedly failed to meet cybersecurity standards while managing TRICARE’s North region contract.
  • Key security oversights included outdated software, poor asset management, and weak password policies.
  • HNFS falsely certified compliance thrice between 2015 and 2017.
  • Despite the settlement, HNFS and Centene deny any data breaches occurred.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here