That is just crazy. Clearly they have been compromised. 25 years ago I worked for a large insurance company in the US doing IT. Our department primarily handled ICD claims coding, among other things. Based on the reports that I used to run, there is no way that our actuary would have missed something like this by now. They are very very smart, and watch the data like a hawk. Analytics tools have come a long way since back then. Every major insurance company must be aware of the problems and the cause, and have chosen to cover it up.