BLUECROSS BLUESHIELD OF TENNESSEE, INC.

BlueCross BlueShield of Tennessee, Inc., acting as a business associate, reported a Hacking/IT Incident affecting a network server. A subcontractor of its covered entity experienced the breach, which the BA reported affected approximately 37,402 individuals overall (HHS portal row attributes 1,670 to this filing). PHI involved names and other identifiers. BCBSTN notified HHS, affected individuals, and the media, and offered free credit monitoring. OCR provided technical assistance regarding the HIPAA Rules.

BlueCross BlueShield of Tennessee, Inc. reported to HHS on 2025-12-26 a Unauthorized Access/Disclosure affecting 780 individuals. Breached information located on Email.

BlueCross BlueShield of Tennessee, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2024-05-23. The breach occurred on 3/19/2024. 1 Montana residents were affected.

BlueCross BlueShield of Tennessee, Inc. reported to HHS on 2023-12-19 a Hacking/IT Incident affecting 1676 individuals. Breached information located on Network Server. A vendor of the entity's business associate experienced a cyber-attack compromising PHI including names, birthdates, claims, financial info, and treatment data.

BlueCross BlueShield of Tennessee, Inc. reported to HHS on 2020-12-18 a Hacking/IT Incident affecting 1340 individuals. Breached information located on Email. A business associate employee was victim of an email phishing scheme exposing ePHI including names, addresses, SSNs, and treatment info.

BlueCross BlueShield of Tennessee, Inc. reported a data breach affecting 3 Maine residents. The breach was discovered on November 9, 2020, and occurred between June 24, 2020, and July 1, 2020. The breach was due to unauthorized access at their vendor, EyeMed. The information acquired includes names and Social Security Numbers. Identity theft protection services are being offered for 2 years through Experian.

BlueCross BlueShield of TN, Inc. reported to HHS on 2017-07-21 a Unauthorized Access/Disclosure affecting 2117 individuals. Breached information located on Paper/Films. The entity erroneously mailed a monthly report to employer health plan administrators that included the PHI of members enrolled in another group due to a software discrepancy.

BlueCross BlueShield of Tennessee, Inc. reported to HHS OCR on 2010-11-01 a Theft incident affecting 1,023,209 individuals. The breached information was located on an 'Other' device/medium. No business associate was identified as involved. No further detail is available from the HHS web description.