BLUE CROSS AND BLUE SHIELD ASSOCIATION

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-488). The register records the breach as discovered on June 6, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-547). The register records the breach as discovered on June 20, 2023. Additional entities named: COMMUNITY HIGH SCHOOL DISTRICT #99. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-452). The register records the breach as discovered on July 6, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-365). The register records the breach as discovered on April 27, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-458). The register records the breach as discovered on July 11, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-381). The register records the breach as discovered on May 10, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-380). The register records the breach as discovered on May 18, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Blue Cross Blue Shield Association notified Montana AG of a data breach affecting the MyBlue Member Portal. A software code change inadvertently altered FEP member access between Feb 4-5, 2020, potentially exposing personal and health information to other members. The incident was discovered on Feb 5, 2020, and resolved. No misuse was detected. Affected individuals were offered 2 years of credit monitoring.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-123). The register records the breach as discovered on December 12, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-125). The register records the breach as discovered on December 12, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BLUE CROSS BLUE SHIELD filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-245). The register records the breach as discovered on May 8, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Blue Cross Blue Shield Association disclosed that a vendor's programming change on September 28, 2019, inadvertently altered permission functionalities in the fepblue mobile app. This error allowed adult family members on a policy contract to view summary medical and pharmacy claims information for other members between September 28 and October 22, 2019, even without affirmative permission. The issue was discovered on October 22, 2019, when the claims viewing feature was turned off. Affected data included names, addresses, insurance IDs, claim details, and drug information. SSNs, DOBs, and financial data were not involved. No misuse was reported.

Blue Cross Blue Shield Service Benefit Plan notified Montana residents of a misconfiguration in the fepblue mobile app that inadvertently allowed adult family members to view summary claims information (pharmacy/medical) for other policyholders between Sept 28 and Oct 22, 2019. The issue was discovered and contained on Oct 22, 2019. No SSN, DOB, or financial data was exposed.

Blue Cross and Blue Shield Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-04-20. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Blue Cross Blue Shield reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-10-17. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Blue Cross & Blue Shield reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-02-01. 5 Massachusetts residents were affected. The report records the breach type as electronic.

Blue Cross Blue Shield reported to HHS on 2012-11-29 a Unauthorized Access/Disclosure affecting 500 individuals. Breached information located on Network Server.