ANTHEM INSURANCE COMPANIES, INC.

Anthem, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-11-19. 1,162 Massachusetts residents were affected.

Anthem Insurance Companies, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-05-07 and was reported on 2022-09-27. 1,531 Indiana residents were affected. 13,406 individuals affected in total.

Anthem, Inc. reported to HHS on 2021-11-19 a Hacking/IT Incident affecting 6118 individuals. Breached information located on Network Server. The breach compromised PHI including names, addresses, DOB, and treatment info. The CE and BA implemented additional administrative and technical safeguards.

Anthem Inc. reported to HHS on 2021-10-15 a Hacking/IT Incident affecting 2023 individuals. Breached information located on Network Server. A business associate's subcontractor suffered a ransomware attack affecting ePHI including names, addresses, DOB, and SSNs.

PracticeMax, a vendor for Anthem's VillageHealth program, experienced a ransomware attack between April 17 and May 5, 2021. Unauthorized access to a server containing Protected Health Information (PHI) was discovered on May 1, 2021. Affected data includes names, dates of birth, addresses, phone numbers, Anthem member IDs, and clinical kidney care data. PracticeMax engaged forensic investigators, rebuilt systems, enhanced firewalls, and offered 24 months of credit monitoring via Epiq.

Anthem Insurance Companies, Inc. notified Montana AG that its vendor, LCP Transportation, experienced a security incident involving unauthorized access to an employee email account between July and September 2018. The breach was discovered on January 15, 2019. Impacted data included names, Anthem IDs, addresses, DOBs, and PHI. LCP engaged forensic investigators and law enforcement. Anthem provided one year of credit monitoring.

YP Holdings LLC notified NH AG of the Anthem, Inc. data breach affecting 2 NH residents. Anthem, a third-party administrator, suffered a sophisticated cyber attack in Dec 2014, discovered Jan 5, 2015. Data accessed included names, SSNs, DOB, and health IDs. Anthem engaged FBI and Mandiant, offering credit monitoring.

Anthem, Inc. suffered a sophisticated external cyber-attack discovered on Jan 29, 2015. BCBSMA notified Nuance Medical Plan participants on Mar 2, 2015. Data accessed included names, DOB, gender, member IDs, addresses, phone, email, and employment info. No SSN or financial data compromised. Anthem offered 2 years of credit monitoring.

Anthem, Inc. notified the NH DOJ of a cyber attack discovered Jan 29, 2015, with unauthorized access occurring since early Dec 2014. The breach impacted members of Anthem and affiliated BCBS plans, exposing PII, SSNs, and PHI. Anthem engaged Mandiant and cooperated with the FBI. United Rentals, Inc. was notified as a plan sponsor.

Anthem, Inc. disclosed a cybersecurity incident where cyber attackers gained unauthorized access to its IT system in early December 2014. Discovered on January 29, 2015, the breach exposed personal information including names, SSNs, DOBs, and employment data for current and former members of affiliated health plans and other BCBS plans. Anthem engaged the FBI and Mandiant, closed the vulnerability, and provided two years of identity protection services.

Anthem, Inc. notified New Hampshire of a cyber attack discovered on Jan 29, 2015. Attackers gained unauthorized access using valid credentials starting in early Dec 2014. Impacted data included names, SSNs, DOBs, and employment info. Anthem engaged the FBI and Mandiant, and is providing 2 years of free identity protection services to affected members.