MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICPHILowContained
California Physicians' Services
bd_69ed9b1cc1204fca · schema v1 · pii pii-v1
Full breach record for California Physicians' Services →Blue Shield of California notified members of a ransomware attack on third-party broker OneDigital on January 20, 2021. Blue Shield learned of the incident on October 4, 2021. Although no evidence of access to Blue Shield systems was found, member PHI (name, DOB, subscriber ID) may have been accessed. Blue Shield offered one year of Experian IdentityWorks.
California clockDiscovered Oct 4, 2021 → Notified Nov 23, 202150d ✓ CA 60-day OK10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-548504
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 13, 2021
- Raw hash
- 8c77680c3a3e0e27d7c616f5a97c9fdf1bd83b3a962e7b514187df9892495bf6
Reporting entity
- Name
- California Physicians' Servicesnorm: california physicians
- Domain
- blueshieldca.com
Victim entity
- Name
- California Physicians' Servicesnorm: california physicians
- Domain
- blueshieldca.com
Incident
- Discovered
- Oct 4, 2021
- Materiality determined
- —
- Notification sent
- Nov 23, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPHI
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 50d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 4, 2021→ Notified: Nov 23, 202150d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.