Premera Blue Cross
bd_d2050db6681c5622 · schema v1 · pii pii-v1
Full breach record for Premera Blue Cross →7 incidents on fileRegulator's decision — not a breach notification
This record is a regulator's decision, not the organisation's own breach notice. Breach-notification fields (discovery date, notification clock) are structurally absent — what this source establishes is the outcome and the provisions the decision cites.
Premera Blue Cross agreed to pay $6.85 million to settle potential HIPAA Privacy and Security Rules violations related to a breach affecting over 10.4 million people. The settlement includes a corrective action plan.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
Sep 25, 2020
Filed
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a breach filing is linked. This record is the regulator's action, not a breach notice. Dashed segments fill in automatically when corroboration arrives.
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- New Hampshire State AGbd_f240484574e352ba2015-05-04 · +1971dVerified
- New Hampshire State AGbd_bc5a1df54eb15c132015-04-02 · +2003dVerified
- New Hampshire State AGbd_69d72a8fe88cec392015-03-27 · +2009dVerified
- Hawaii State AGbd_13935cd688d3ab102015-03-24 · +2012dVerified
Show 5 more filings ↓Show fewer ↑up to 2019d gap
- South Carolina State AGbd_9ec8af423fb684d52015-03-19 · +2017dVerified
- Massachusetts State AGbd_de2d028bf0408dea2015-03-18 · +2018dVerified
- HHS OCRbd_9a804b5de84dfb072015-03-17 · +2019dVerified
- California State AGbd_e8e76c27f5c889f62015-03-17 · +2019dCandidate
- New Hampshire State AGbd_f653fc0c8376c8532015-03-17 · +2019dVerified
Filing propagation · 10 filings · 6 states
View merged incident ↗Pattern: first filing Mar 17 (WA), last Sep 25 — a 2019-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- instrument + outcome
- amount as filed (USD)
- CFR provisions
- the breach it recites
- discovery date
- notification clock
The dates the agreement recites belong to the underlying breach, years earlier, and are kept as evidence of WHICH breach rather than as this record’s timeline.