HackingHealthcareTechnologyHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

Premera Blue Cross

bd_f240484574e352ba · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 9, 2015

Filed

May 4, 2015

To disclose

16 weeks

Affected · nationwide

7171 in this filing

Linked

10 filings

Confidence

66%

Full breach record for Premera Blue Cross →7 incidents on file

Premera, Inc., a downstream subcontractor to BCBSMA, suffered a cyber-attack starting May 5, 2014, discovered Jan 9, 2015. Nuance Communications, Inc. reports 717 impacted plan participants, including 1 in NH. Data accessed included PII, SSN, PHI, and financial data. Notices sent April 2015.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 249 days

discovery → filing · 16 weeks / 115 days

May 5, 2014

Begins

Jan 9, 2015

Discovered

May 4, 2015

Filed

vs. sector median

+4 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

New Hampshire State AGbd_bc5a1df54eb15c132015-04-02 · +32dVerified
New Hampshire State AGbd_69d72a8fe88cec392015-03-27 · +38dVerified
Hawaii State AGbd_13935cd688d3ab102015-03-24 · +41dVerified
South Carolina State AGbd_9ec8af423fb684d52015-03-19 · +46dVerified

Show 5 more filings ↓up to 1971d gap

Massachusetts State AGbd_de2d028bf0408dea2015-03-18 · +47dVerified
HHS OCRbd_9a804b5de84dfb072015-03-17 · +48dVerified
California State AGbd_e8e76c27f5c889f62015-03-17 · +48dCandidate
New Hampshire State AGbd_f653fc0c8376c8532015-03-17 · +48dVerified
HHS OCR enforcementbd_d2050db6681c56222020-09-25 · +1971dVerified by operator

Name: Nuance Communications, Inc
norm: nuance communications
Domain: nuance.com

Name: Premera Blue Cross
norm: premera blue cross
Domain: premera.com
Industry: HealthcarellmTechnologyllm

Discovered: Jan 9, 2015
Breach occurred: May 5, 2014
Undetected for: 249 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 27, 2015
Affected individuals: 717state + nationwide
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Mailed notification letters to impacted Plan participants
Working with BCBSMA to ensure they send notices to each impacted Plan participant
Offering two years of free credit monitoring and identity protection services
Changes made: Offering two years of free credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(115 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 6 states

View merged incident ↗

HHS OCRMar 17 · first

California State AGMar 17 · first

New Hampshire State AGMar 17 · first

Massachusetts State AG+1d

South Carolina State AG+2d

Hawaii State AG+7d

New Hampshire State AG+10d

New Hampshire State AG+16d

New Hampshire State AG+48d · this page

HHS OCR enforcement+2019d

Pattern: first filing Mar 17 (WA), last Sep 25 — a 2019-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/premera-blue-cross-20150504.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 4, 2015
Raw hash: 849bd67bb2f822902e8b137c49faa5fa2682bb13ed5e964724f17414dd1466f6

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityNuance Communications, Inc

Victim entityPremera Blue Cross

Incidentdiscovered Jan 9, 2015

Stated responseMailed notification letters to impacted Plan participants

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov