Connecticut Attorney General Richard Blumenthal last week sued Health Net of Connecticut, alleging the health insurer failed to secure private information for roughly 446,000 enrollees and promptly notify them of the security breach. The case is the first brought under HITECH provisions of the American Recovery and Reinvestment Act that authorize state attorneys general to enforce the Health Insurance Portability and Accountability Act. Blumenthal alleges that Health Net failed to comply with its own policies regarding the protection of personal information; failed to effectively train and supervise its workforce on the proper policies for maintaining, using, and disclosing personal health information; and failed to encrypt the private information and to promptly notify his office and enrollees of the data breach after learning of it last May. The lawsuit also names UnitedHealth Group and Oxford Health Plans, which own the Connecticut insurer.