DisclosureLens
FEDERALUnknownLow

Premera Blue Cross

bd_d2050db6681c5622 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 25, 2020

To disclose

—

Affected

Not disclosed

Linked

8 records

Confidence

90%
Full breach record for Premera Blue Cross →7 incidents on file

Regulator's decision — not a breach notification

This record is a regulator's decision, not the organisation's own breach notice. Breach-notification fields (discovery date, notification clock) are structurally absent — what this source establishes is the outcome and the provisions the decision cites.

Premera Blue Cross agreed to pay $6.85 million to settle potential HIPAA Privacy and Security Rules violations related to a breach affecting over 10.4 million people. The settlement includes a corrective action plan.

Incident timeline — partial

? — ?

Breach window unknown

Sep 25, 2020

Filed

—

Corroborated · see linked filings

This record is the regulator's action, not a breach notice; its own dates cannot anchor compliance clocks. See the linked filings.

This enforcement record is one of 8 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 2019d gap

Filing propagation · 7 filings · 6 states

View merged incident ↗
HHS OCRMar 17 · first
California State AGMar 17 · first
New Hampshire State AGMar 17 · first
Massachusetts State AG+1d
South Carolina State AG+2d
Hawaii State AG+7d
New Hampshire State AG+10d

Pattern: first filing Mar 17 (WA), last Mar 27 (NH) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • instrument + outcome
  • amount as filed (USD)
  • CFR provisions
  • the breach it recites
  • discovery date
  • notification clock

The dates the agreement recites belong to the underlying breach, years earlier, and are kept as evidence of WHICH breach rather than as this record’s timeline.