Blue Cross and Blue Shield of Kansas City
bd_6d3e0e389678ba51 · schema v1 · pii pii-v1
Full breach record for Blue Cross and Blue Shield of Kansas City →Blue Cross and Blue Shield of Kansas City (BCBSKC) reported a data breach involving its third-party vendor, LogicGate, Inc. Unauthorized access to LogicGate's backup files occurred on February 23, 2021. BCBSKC data was not directly accessed, but member records stored by LogicGate were compromised. Approximately 47,035 individuals were affected, including 18 New Hampshire residents. Exposed data included names, dates of birth, addresses, insurance details, medical information, and Social Security numbers for a subset. BCBSKC notified affected members, law enforcement, and the Office for Civil Rights, and offered two years of credit monitoring via IDX.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_782eb64f5d5cff6bMontana State AGfiled 2021-05-26(2d gap)Candidate
- bd_21a03a3b15639ecfMaine State AGfiled 2021-06-02(5d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/blue-cross-blue-shield-kansas-city-20210528.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2021
- Raw hash
- b137466c4b4f54dc2054cec6f0dde44b7ca57bf86b5f939905b569db3a75e6be
Reporting entity
- Name
- Blue Cross and Blue Shield of Kansas Citynorm: blue cross and blue shield of kansas city
Victim entity
- Name
- Blue Cross and Blue Shield of Kansas Citynorm: blue cross and blue shield of kansas city
Incident
- Discovered
- Apr 7, 2021
- Materiality determined
- —
- Notification sent
- May 26, 2021
- Affected individuals
- 47,035
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified law enforcementConsumer reporting agencies and the Office for Civil Rights are being notified
- Third party
- via LogicGate, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.