AccidentalMisdeliveryData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumResolved
California Physicians' Services
bd_cf9f43697e39cf68 · schema v1 · pii pii-v1
Full breach record for California Physicians' Services →Blue Shield of California inadvertently included provider Social Security numbers (SSNs) and personal data in public provider rosters submitted to the California Department of Managed Health Care (DMHC) between Feb-Apr 2013. The DMHC discovered the error on May 16, 2014, after producing rosters in response to ten Public Records Act requests. Blue Shield offered one year of Experian ProtectMyID. Remediation included DLP software and revised submission procedures.
California clockDiscovered May 16, 2014 → Notified Jul 3, 201448d ✓ CA 60-day OK8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-45858
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2014
- Raw hash
- 24f8edfc1edf80eb3541bf4345c9389b2dd7e81d8d3e47489a5d5c15a0260f6b
Reporting entity
- Name
- Department of Managed Health Carenorm: department of managed health care
Victim entity
- Name
- California Physicians' Servicesnorm: california physicians
- Domain
- blueshieldca.com
Incident
- Discovered
- May 16, 2014
- Materiality determined
- —
- Notification sent
- Jul 3, 2014
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1567 Exploit Trusted Relationship
- Regulator citations
- Notified California Department of Managed Health Care (DMHC)
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 48d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 16, 2014→ Notified: Jul 3, 201448d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.