BUPA reveal some customer data stolen by ex-employee

Private healthcare group BUPA suffered a data breach this week where someone managed to run off with sensitive customer information.

But unlike many data breaches that have occurred over the last few years (e.g. Yahoo, Sony) this breach did not occur from over the Internet.

Rather it was a [presumably] disgruntled employee who – according to BUPA Global Managing Director Sheldon Kenton – “inappropriately copied and removed some customer information“. The employee was promptly dismissed, according to the healthcare group.

This information includes customer details such as email, phone number and BUPA membership number. However no financial or medical information was disclosed.

The letter many BUPA customers received.

According to BUPA, those with local domestic insurance should not be affected. However those with international private healthcare insurance and with policy numbers beginning with BI may have had their information stolen.

BUPA warned affected customers about the breach and explained that crooks with the stolen data may try to contact them pretending to be from BUPA in order to scam them.

It goes to show that no matter how much focus you spend on securing your data breaches that may originate from cyberspace, you could still suffer a data breach from the inside.

Continued below...

Thanks for reading, we hope this article helped, but before you leave us for greener pastures, please help us out.

We're hoping to be totally ad-free by 2025 - after all, no one likes online adverts, and all they do is get in the way and slow everything down. But of course we still have fees and costs to pay, so please, please consider becoming a Facebook supporter! It costs only 0.99p (~$1.30) a month (you can stop at any time) and ensures we can still keep posting Cybersecurity themed content to help keep our communities safe and scam-free. You can subscribe here

---

Remember, we're active on social media - so follow us on Facebook, Bluesky, Instagram and X