Law Enforcement Health Benefits Inc.
| Primary URL | Location | Industry | www[.]lehb[.]org |
Country
United States of America
|
Healthcare
|
|---|
Profile
Law Enforcement Health Benefits Inc., also known as LEHB, operates as a provider of health benefits services. The organization's name indicates a focus on delivering health insurance and related benefits to law enforcement personnel. According to the ransomware incident description, LEHB maintains repositories of personal, medical, and health insurance information for its members. This includes data such as names, Social Security numbers, driver’s license details, birth dates, and medical records. Thus, its core function involves the administration and management of health benefit plans for the law enforcement community.
The September 2021 ransomware attack on LEHB affected over 85,000 individuals, revealing the scale of its membership base. This figure demonstrates that the organization serves a substantial population of law enforcement employees and their dependents. The breach involved network infiltration and file encryption, leading to the exfiltration of sensitive personal and health data. Although no identity theft or fraud was reported, the incident highlighted the volume of records under LEHB's custodianship. The size of the impacted group provides a concrete indicator of the organization's reach within its target sector.
LEHB's distinguishing attribute lies in its specialization in health benefits for law enforcement, a niche sector with specific regulatory and privacy requirements. The ransomware response included reinforcing network security and updating internal procedures to prevent recurrence. The organization emphasized ongoing policy assessments as part of its mitigation strategy, indicating a commitment to continual improvement. These actions reflect a focus on safeguarding the confidential health information entrusted to it by its members. LEHB operates as a dedicated health benefits administrator for law enforcement, with a demonstrated responsibility for protecting extensive personal data.
