Blue Cross Blue Shield Association

Anthem Blue Cross reported a data security incident involving its legal services provider, Von Behren & Hunter LLP (VBH). On January 24, 2022, VBH discovered unauthorized access to its network. On February 10, 2022, VBH confirmed that certain data was accessed and acquired without authorization. A subsequent review on March 25, 2022, determined that some Anthem Blue Cross members' protected health information (PHI) and personal information (name) may have been stored on the impacted server. VBH engaged the FBI and offered identity protection services to affected individuals. The incident is classified as a third-party vendor compromise.