Aetna also issued a statement:

We are aware of the unfortunate situation and regret that it occurred.  We have been working with the university to notify affected students and help ensure that an incident of this nature doesn't happen again.  The mailing was a brochure sent out by our mail vendor outlining student health insurance options for the upcoming school year.

Aetna received the file from UVA in a secure, electronic format and provided it to the mail vendor in the same manner.  Aetna's standard protocol with the vendor is to review samples of the mail before a mailing goes out.  That procedure was not followed in this circumstance.

We have reviewed our protocols with the vendor to ensure they are followed for every mailing.  We also are instituting additional internal,Aetna protocols to detect and purge unnecessary data fields from files received from student health customers.