[author: Jane Anderson] ◆ The Florida Healthy Kids Corporation (FHKC), a Medicaid managed care plan, said one of its vendors, Jelly Bean Communications Design, experienced a security incident spanning seven years that involved “several thousand” Medicaid applicants. Jelly Bean Communications was responsible for hosting the Florida Healthy Kids website during the hacking incident, the managed care company said. “FHKC was notified on December 9, 2020, that several thousand applicant addresses had been inappropriately accessed and tampered with,” said a statement from the managed care company. “These addresses are collected as part of the online Florida KidCare application.” There is no evidence that any applicant’s personal information was removed from the system, according to FHKC. After an independent investigation, “cybersecurity experts identified significant vulnerabilities in the hosted website platform and the databases that support the online Florida KidCare application,” the company said. “FHKC learned that these vulnerabilities spanned a seven-year period from November 2013 until December 2020. FHKC temporarily shut down the website and databases in December 2020.” The types of information that may have been exposed included full names, dates of birth, email addresses, phone numbers, addresses, Social Security numbers, financial information and secondary insurance information.