There are two parts to this article – the first section that explains the potential role of a foreign player in the compromise of Anthem, and – the second section that tells the truth. Though the article mentions the California Insurance Commissioner’s warning that insurers cannot ward off foreign governments and that the US government must provide cybersecurity defenses, the truth is found in the utter weaknesses discovered in the Anthem environment. Anthem may not have been capable of preventing the attack or the loss of some data, but they certainly could have mounted a much stronger defense that would have mitigated some of the losses.
Blame shifting has no place in cyber security. We all have and play a role.