AccidentalHealthcareFinancial ServicesHealthcareMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDPIIMediumResolved

REGENCE BLUESHIELD

bd_559c11524f48d98b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 26, 2019

Filed

Aug 16, 2019

To disclose

21 days

Affected · nationwide

684642 in this filing

Confidence

71%

Full breach record for REGENCE BLUESHIELD →2 incidents on file

Regence BlueShield notified the Washington AG that envelopes mailed on July 25, 2019, to 684 members (642 WA residents) mistakenly included Social Security numbers in the address block due to a vendor process error. The error was discovered on July 26, 2019. Notices were sent on August 16, 2019, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 21 days

Jul 25, 2019

Begins

Jul 26, 2019

Discovered

Aug 16, 2019

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed684 affectedView incident

Name: REGENCE BLUESHIELD
norm: regence blueshield

Name: REGENCE BLUESHIELD
norm: regence blueshield
Industry: HealthcarellmFinancial Servicesllm

Discovered: Jul 26, 2019
Breach occurred: Jul 25, 2019
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Aug 16, 2019
Affected individuals: 684state + nationwide
Data types: Identity (basic)Government IDPII
Data elements: NameSocial Security number
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection
Regulator citations: Notified Washington Office of the Attorney General

During the incident: All mailings from this vendor were stopped
A new process was implemented to remove SSNs before sending a mail file and sending all files with column labels
Offered one year of complimentary credit monitoring through Experian to impacted members
Changes made: A new process was implemented to remove SSNs before sending a mail file and sending all files with column labels
Any file that does not meet these requirements will be rejected and replaced with a revised version
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10505.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 16, 2019
Raw hash: e890788ce51acd4e1e4aa39156b5b3c8ec3f901d9226904bf76c3493fede2421

Reporting entityREGENCE BLUESHIELD

Victim entityREGENCE BLUESHIELD

Incidentdiscovered Jul 26, 2019

Stated responseAll mailings from this vendor were stopped

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com