HackingHealthcareFinancial ServicesHealthcareStolen CredentialsCustomer Data InvolvedPHIIdentity (basic)Health (basic)LowContained

Anthem Blue Cross

bd_53d91e5a9dbdfb83 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 15, 2021

Filed

Nov 24, 2021

To disclose

6 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Anthem Blue Cross →9 incidents on file

Anthem Blue Cross notified the California AG of unauthorized access to member portal accounts occurring between October 1 and October 14, 2021, discovered on October 15, 2021. Affected data included names, dates of birth, addresses, emails, phone numbers, and healthcare identification numbers (PHI). The company temporarily shut down the portal and offered one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 15, 2021 → Notified Oct 21, 20216d ✓ CA 60-day OK6 weeks discovery → filing

Incident timeline

undetected · 14 days

discovery → filing · 6 weeks / 40 days

Oct 1, 2021

Begins

Oct 15, 2021

Discovered

Nov 24, 2021

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Anthem Blue Cross
norm: anthem blue cross
Domain: abc.anthem.com

Name: Anthem Blue Cross
norm: anthem blue cross
Domain: abc.anthem.com
Industry: HealthcarellmFinancial Servicesllm

Discovered: Oct 15, 2021
Breach occurred: Oct 1, 2021 – Oct 14, 2021
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 21, 2021
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Health (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts

During the incident: Looked into what caused this issue
Temporarily shut down the portal account
Offering a complimentary one-year membership of Experian IdentityWorks
Changes made: Taking steps to reduce the risk of this happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: CA 60-day OK · 6d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 15, 2021
→ Notified: Oct 21, 2021
6d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 15, 2021 → Notified: Oct 21, 2021	6d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-547906
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 24, 2021
Raw hash: 997497bee5649ac39f72bd061cdd3082fafcc36d6ab49d1fb16645de4a56836d

Reporting entityAnthem Blue Cross

Victim entityAnthem Blue Cross

Incidentdiscovered Oct 15, 2021

Stated responseLooked into what caused this issue

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov