AccidentalHealthcareFinancial ServicesHealthcarePublishing ErrorEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumResolved

Anthem Blue Cross

bd_3cab57fa0c979963 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 23, 2013

Filed

Nov 20, 2013

To disclose

28 days

Affected

Not disclosed

Confidence

66%

Full breach record for Anthem Blue Cross →9 incidents on file

Anthem Blue Cross erroneously posted PDF documents containing provider Tax Identification Numbers (TINs), names, and business addresses on its website from October 23 to October 24, 2013. Some providers used their Social Security Numbers as TINs. The documents were removed and corrected within 24 hours. Anthem offered one year of identity protection services to affected providers.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Oct 23, 2013

Begins

Oct 23, 2013

Discovered

Nov 20, 2013

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Anthem Blue Cross
norm: anthem blue cross
Domain: abc.anthem.com

Name: Anthem Blue Cross
norm: anthem blue cross
Domain: abc.anthem.com
Industry: HealthcarellmFinancial Servicesllm

Discovered: Oct 23, 2013
Breach occurred: Oct 23, 2013 – Oct 24, 2013
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Employment
Attack vector: Unknown

During the incident: Removed the PDFs from the Anthem.com/ca website
Corrected and re-posted the PDFs without the TINs
Offering free identity protection services for one year under AllClear ID
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-43327
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2013
Raw hash: def8568b05eadc99bfaed786dc79f234c7d78781efb6cd919f1872ac2be6f8bb

Reporting entityAnthem Blue Cross

Victim entityAnthem Blue Cross

Incidentdiscovered Oct 23, 2013

Stated responseRemoved the PDFs from the Anthem.com/ca website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov