As we head into the new week, here's a quick summary of major data security developments from around the country. Aetna Hit With Second "Envelope" Lawsuit Aetna Inc. is now facing a second lawsuit over the disclosure of HIV-related prescription information that was "clearly visible" through a transparent window on envelopes sent to 12,000 policyholders in late July. The most recent lawsuit – filed in Los Angeles Superior Court – claims that Aetna's "utter failure to protect and safeguard" protected healthcare information (PHI) violated both state and federal law. The 22-page putative class action complaint was brought on behalf of an unidentified Los Angeles resident, referred to only as "S.A." in the complaint, together with other California policyholders whose PHI was allegedly exposed in the incident. "Aetna was privy, came into possession [of] and maintained plaintiff's PHI, of which Aetna has a legal duty to ensure the confidentiality and security," the complaint charged.