HackingHealthcareHealthcareHacking OtherSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
BLUECROSS BLUESHIELD OF TENNESSEE, INC.
bd_6a02398a618749ad · schema v1 · pii pii-v1
Full breach record for BLUECROSS BLUESHIELD OF TENNESSEE, INC. →BlueCross BlueShield of Tennessee, Inc. reported a data breach affecting 3 Maine residents. The breach was discovered on November 9, 2020, and occurred between June 24, 2020, and July 1, 2020. The breach was due to unauthorized access at their vendor, EyeMed. The information acquired includes names and Social Security Numbers. Identity theft protection services are being offered for 2 years through Experian.
Maine clockDiscovered Nov 9, 2020 → Filed with AG Dec 18, 202039d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_44e5b905dee44478HHS OCRfiled 2020-12-18Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b99afd7b-db72-4718-9513-581c1a090777.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 18, 2020
- Raw hash
- f1b95e17aa29547efc449bf8deeb4af943afd679b82fe1b066e9d2defe133745
Reporting entity
- Name
- BLUECROSS BLUESHIELD OF TENNESSEE, INC.norm: bluecross blueshield of tennessee
- Domain
- bcbst.com
Victim entity
- Name
- BLUECROSS BLUESHIELD OF TENNESSEE, INC.norm: bluecross blueshield of tennessee
- Domain
- bcbst.com
- Industry
- Healthcarellm
Incident
- Discovered
- Nov 9, 2020
- Materiality determined
- —
- Notification sent
- Dec 9, 2020
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- ME AG >30d · 39d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 9, 2020→ Filed with AG: Dec 18, 202039d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.