This breach follows Anthem's settlement of $115 million after their 2015 data breach.

Tripwire explains:

Health insurance plan provider Anthem says a third-party breach might have exposed 18,500 customers’ personal and medical data.

In a statement (PDF), Anthem media contact Gene Rodriguez reveals how the security incident links back to LaunchPoint Ventures LLC, a firm which provides insurance coordination services to Anthem:

“On April 12, 2017, LaunchPoint, learned that one of its employees was likely involved in identity theft related activities. LaunchPoint hired a forensic firm to investigate. On May 28, 2017, LaunchPoint learned that some other, non-Anthem data, may have been misused by the employee. LaunchPoint then learned the employee emailed a file with information about Anthem companies’ members to his personal email address on July 8, 2016. This action violated LaunchPoint’s policies. The investigation is ongoing. LaunchPoint does not know if the email was related to a legitimate work purpose.”