BLUE CROSS OF IDAHO HEALTH SERVICE, INC.

Blue Cross of Idaho Health Service, Inc. reported to HHS on April 19, 2019, that an unauthorized individual impersonated a healthcare provider to gain access to its provider web portal, affecting 6,045 individuals. The actor accessed names, health insurance, clinical, and financial information and attempted to reroute payments to a fraudulent bank account. In response, the entity stopped the fraudulent payment, initiated an investigation, revised policies, retrained staff on social engineering, and offered three years of credit monitoring to affected individuals.