Case Study: Color ensures compliance and protects sensitive health data with Material Security

Color protects 1.3M+ sensitive messages with Material Security

Color, a health benefits company, faced a significant challenge securing vast amounts of Protected Health Information (PHI) residing in employee email inboxes. This sensitive data, a prime target for email-based threats, posed a major compliance and financial risk, especially as the company operated across multiple consolidated Microsoft 365 tenants. They turned to Material Security and its Account Takeover Resilience (ATOR) product to address this problem.

Material Security's solution automatically detected and redacted sensitive messages after a one-week grace period, requiring step-up verification for retrieval. This implementation protected over 1.3 million sensitive messages, drastically reducing the risk of account takeover and lateral movement. The results were exceptional, with only 682 retrieval requests out of 30,000 locked messages in a single week. Material Security's tools were instrumental in helping Color achieve HITRUST R2 and SOC 2 Type II certifications with minimal friction for employees.

Color