WellPoint disclosed what they were supposed to but the Feds found they still had weak controls and levied a fine.
John Pescatore, director at SANS, stated on the mailing list that he believed WellPoint could have fixed the problems that led to the fine for 20% of what they will end up paying.