MisuseData MishandlingEmployee Data InvolvedPHIIDENTITY_BASICLowResolved
California Physicians' Services
bd_3fb55dff60a8031c · schema v1 · pii pii-v1
Full breach record for California Physicians' Services →Blue Shield of California disclosed that an employee inadvertently emailed Protected Health Information (PHI) to an unauthorized insurance broker in November 2017. The disclosed data included names, addresses, subscriber IDs, and plan details. Blue Shield reported the incident to CMS, disciplined the employees, retrained staff, and offered credit monitoring services.
California clockDiscovered Jan 15, 2018 → Notified Mar 23, 201867d ✗ CA 60-day late13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_5e812938a5be6eb5HHS OCRfiled 2018-04-13Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-135277
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 13, 2018
- Raw hash
- ce82410d9dad00dbcd11b430edee1dbf8148dd6aeeb741b9ae6d28ac5540c04e
Reporting entity
- Name
- California Physicians' Servicesnorm: california physicians
- Domain
- blueshieldca.com
Victim entity
- Name
- California Physicians' Servicesnorm: california physicians
- Domain
- blueshieldca.com
Incident
- Discovered
- Jan 15, 2018
- Materiality determined
- —
- Notification sent
- Mar 23, 2018
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASIC
- Attack vector
- Insider
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- InternalSecondary
- Regulator citations
- Reported matter to the Centers for Medicare and Medicaid Services (CMS)
- Initial access
- insider_action
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- CA 60-day late · 67d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 15, 2018→ Notified: Mar 23, 201867d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.