BLUE CROSS OF IDAHO HEALTH SERVICE, INC.

Blue Cross of Idaho notified the Idaho AG that an external review vendor experienced a data breach on Nov 9, 2021. 22 members affected (10 in Idaho). SSNs likely involved. Vendor recovered data; no misuse found. Vendor handling notifications and credit monitoring.

Blue Cross of Idaho submitted a supplemental notice to the Idaho Attorney General regarding a phishing attack on a broker. The incident resulted in unauthorized access to an employee's email account. The broker is notifying members and offering credit monitoring.

Supplemental notice to Idaho AG regarding a phishing attack on insurance broker Armfield, Harrison & Thomas (AHT) on Dec 4, 2020. AHT discovered the breach on Dec 8, 2020. Compromised data included names, addresses, DOB, medical info, health insurance info, other gov ID, and financial account numbers. Blue Cross of Idaho is reporting on behalf of AHT.

Blue Cross of Idaho Health Service, Inc. reported to HHS on April 19, 2019, that an unauthorized individual impersonated a healthcare provider to gain access to its provider web portal, affecting 6,045 individuals. The actor accessed names, health insurance, clinical, and financial information and attempted to reroute payments to a fraudulent bank account. In response, the entity stopped the fraudulent payment, initiated an investigation, revised policies, retrained staff on social engineering, and offered three years of credit monitoring to affected individuals.