HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Blue Cross and Blue Shield of Kansas City
bd_21a03a3b15639ecf · schema v1 · pii pii-v1
Full breach record for Blue Cross and Blue Shield of Kansas City →Blue Cross and Blue Shield of Kansas City reported a data breach affecting 47,034 individuals, including 164 Maine residents. The breach occurred on February 23, 2021, and was discovered on March 27, 2021. Described as an external system breach or hacking, it resulted in the compromise of names and Social Security Numbers. The company began notifying affected individuals in writing on May 26, 2021, and offered 24 months of identity theft protection services.
Maine clockDiscovered Mar 27, 2021 → Filed with AG Jun 2, 202167d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6d3e0e389678ba51New Hampshire State AGfiled 2021-05-28(5d gap)Verified
- bd_782eb64f5d5cff6bMontana State AGfiled 2021-05-26(7d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d959f7d2-ba89-4076-a1e5-b7c7ace4bb8e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 2, 2021
- Raw hash
- 68c46a0e338c2096e55ebcd951ce6562a2bd45d47c392e99463d38fca42aabfd
Reporting entity
- Name
- Blue Cross and Blue Shield of Kansas Citynorm: blue cross and blue shield of kansas city
Victim entity
- Name
- Blue Cross and Blue Shield of Kansas Citynorm: blue cross and blue shield of kansas city
Incident
- Discovered
- Mar 27, 2021
- Materiality determined
- —
- Notification sent
- May 26, 2021
- Affected individuals
- 47,034
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- ME AG >30d · 67d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 27, 2021→ Filed with AG: Jun 2, 202167d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.