MisuseData MishandlingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Blue Shield of California (BSC)
bd_579f487622636a87 · schema v1 · pii pii-v1
Full breach record for Blue Shield of California (BSC) →Blue Shield of California notified the California AG that an employee emailed a confidential spreadsheet containing insurance brokers' PII (including SSN/TIN, name, address, phone, email) to a personal email address on June 17, 2022, and again on October 30, 2022. The incident was discovered on October 30, 2022. The employee's access was disabled, and they were directed to delete the data. Blue Shield is strengthening detection tools and offering one year of credit monitoring.
California clockDiscovered Oct 30, 2022 → Notified Dec 22, 202253d ✓ CA 60-day OK8 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c82d174b28637e9fMontana State AGfiled 2022-12-22Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-560344
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2022
- Raw hash
- 2daf347329906aa0c523492fe334e8ef91b36281503898ddb0cc12001fb6aef6
Reporting entity
- Name
- Blue Shield of California (BSC)norm: blue shield of california bsc
Victim entity
- Name
- Blue Shield of California (BSC)norm: blue shield of california bsc
Incident
- Discovered
- Oct 30, 2022
- Materiality determined
- —
- Notification sent
- Dec 22, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 53d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 30, 2022→ Notified: Dec 22, 202253d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.