Anthem Inc.
bd_8f37e1c095a846da · schema v1 · pii pii-v1
Full breach record for Anthem Inc. →Anthem, Inc. notified California AG that cyber attackers gained unauthorized access to its IT system starting in early December 2014, discovered on January 29, 2015. The breach affected current and former members of Anthem and affiliated Blue Cross/Blue Shield plans. Accessed data included names, DOBs, SSNs, healthcare IDs, addresses, emails, and employment/income data. No credit card or medical claims data was compromised. Anthem engaged the FBI and Mandiant, closed the vulnerability, and provided two years of free identity protection via AllClear ID to affected individuals.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0bbff98139b67cc0HHS OCRfiled 2015-02-13Verified
- bd_76cd1b5530ae9e56Hawaii State AGfiled 2015-02-15(2d gap)Verified
- bd_c3e9d7c5bbd8b73bCalifornia State AGfiled 2015-02-10(3d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-48418
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 13, 2015
- Raw hash
- 7d74fac8e94417bbac872be51c174dd7501c31dc734a86a573092b0b853c4d98
Reporting entity
- Name
- Flag & Anthemnorm: flag anthem
- Domain
- flagandanthem.com
Victim entity
- Name
- Anthem Inc.norm: anthem
- Domain
- anthem.com
Incident
- Discovered
- Jan 29, 2015
- Materiality determined
- —
- Notification sent
- Feb 13, 2015
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Cooperating with the FBI’s investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 days(15 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 15d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 29, 2015→ Notified: Feb 13, 201515d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.