DisclosureLens
HackingHealthcareFinancial ServicesHealthcareStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPHIHealth (basic)Identity (basic)Government IDMediumContained

Anthem Blue Cross

bd_cc8d7e0833706239 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 5, 2022

Filed

Sep 28, 2022

To disclose

8 weeks

Affected

Not disclosed

Confidence

66%
Full breach record for Anthem Blue Cross →9 incidents on file

Anthem Blue Cross notified California residents that on May 7, 2022, an unauthorized person accessed data from vendor Choice Health and downloaded a file containing PHI. Anthem learned of the incident on August 5, 2022. Affected data included names, health plan carrier names, and potentially addresses, dates of birth, phone numbers, email addresses, Medicare/Medicaid IDs, and Social Security numbers. The vendor enhanced security measures. Some individuals were offered two years of Experian IdentityWorks.

Incident timeline

undetected · 90 days
discovery → filing · 8 weeks / 54 days

May 7, 2022

Begins

Aug 5, 2022

Discovered

Sep 28, 2022

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.