Risk Management Services Reports Data Breach Affecting Client Information

Risk management and claims administration company Risk Management Services said a data security incident it suffered earlier this year compromised the sensitive personal data of its clients.

 

Based in Metairie, Louisiana, Risk Management Services offers risk management and claims administration services to businesses, municipalities, and state agencies. The company specializes in workers’ compensation for self-insured employers, including services for the Louisiana Office of Risk Management (ORM), which oversees the state’s self-insurance programs and tort claims.

 

In a data security incident notice submitted to the Office of the Maine Attorney General, RMS—acting on behalf of LCTA Mutual Holding Company, LCTA Casualty Insurance Company, doing business as LCTA Workers’ Comp (LCTA)—said that it detected unusual activity within its internal network on June 19.

 

The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

The investigation revealed that “an unauthorised individual gained access to our systems via a remote connection. This occurred due to a subcontractor’s failure to follow established security protocols.”

 

“We discovered that the incident may have involved your personal information,” RMS said.

 

The compromised data included names, residential addresses, Social Security numbers, dates of birth and medical information. The filing with the Maine state regulator’s office also states that RMS has identified at least 22,300 individuals affected by the incident.

 

“No financial account, credit card, or debit card information was involved. Also, this applies only to the data that RMS holds for LCTA. There is no indication that LCTA’s systems have been impacted,” the risk management company added.

 

While RMS found no evidence of the compromised information being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general. 

 

It has also offered one year of complimentary identity protection and credit monitoring services through Epiq to all affected individuals.