AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTPHIHEALTH_BASICMediumResolved
California Physicians' Services
bd_94de599a0e938eaa · schema v1 · pii pii-v1
Full breach record for California Physicians' Services →Blue Shield of California disclosed that its website inadvertently displayed Agent ID numbers (which are Social Security Numbers) for Individual and Family Plan members on transaction confirmation pages. The exposure occurred between December 20, 2013, and January 16, 2014. The company discovered the issue on January 13, 2014, and removed the data display by January 16, 2014. The incident involved potential exposure of SSNs, names, and billing/payment information. Blue Shield offered one year of Experian identity protection services.
California clockDiscovered Jan 13, 2014 → Notified Feb 18, 201436d ✓ CA 60-day OK5 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-44151
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 18, 2014
- Raw hash
- 40e3501f10075c8415fc935b4423017ab5e04cef545748728f549de90cb6c54a
Reporting entity
- Name
- California Physicians' Servicesnorm: california physicians
- Domain
- blueshieldca.com
Victim entity
- Name
- California Physicians' Servicesnorm: california physicians
- Domain
- blueshieldca.com
Incident
- Discovered
- Jan 13, 2014
- Materiality determined
- —
- Notification sent
- Feb 18, 2014
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTPHIHEALTH_BASIC
- Attack vector
- Unknown
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 36d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 13, 2014→ Notified: Feb 18, 201436d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.