Blue Cross and Blue Shield of Massachusetts, Inc.
bd_b4adf787f548a865 · schema v1 · pii pii-v1
Full breach record for Blue Cross and Blue Shield of Massachusetts, Inc. →16 incidents on fileBlue Cross and Blue Shield of Massachusetts notified Montana residents of a data security incident involving vendor LifeWorks US Inc. A former employee emailed spreadsheets containing names, addresses, SSNs, and pension info to personal email accounts on May 17, 2022. Blue Cross was notified on June 20, 2022. Notices were sent July 20, 2022, offering 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 17, 2022
Begins
Jun 20, 2022
Discovered
Jul 20, 2022
Filed
vs. sector median
8 wks faster
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- Maine State AGbd_4410ed228c5fc5e22022-07-20Candidate
- Indiana State AGbd_d3c9920dc1864a8d2022-07-20Verified
- New Hampshire State AGbd_29ae49c31ad37aac2022-07-27 · +7dVerified
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing Jul 20 (ME), last Jul 27 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.