Blue Cross Blue Shield Association

Anthem Blue Cross notified California regulators of a breach involving vendor Choice Health. On May 7, 2022, an unauthorized person accessed and downloaded files containing Protected Health Information (PHI) and personal identifiers (SSN, Medicare/Medicaid IDs) of Medi-Cal members. The incident was discovered on August 5, 2022. The vendor enhanced security measures, and Anthem offered two years of Experian IdentityWorks monitoring to affected individuals.

Anthem Blue Cross reported a data security incident involving its legal services provider, Von Behren & Hunter LLP (VBH). On January 24, 2022, VBH discovered unauthorized access to its network. On February 10, 2022, VBH confirmed that certain data was accessed and acquired without authorization. A subsequent review on March 25, 2022, determined that some Anthem Blue Cross members' protected health information (PHI) and personal information (name) may have been stored on the impacted server. VBH engaged the FBI and offered identity protection services to affected individuals. The incident is classified as a third-party vendor compromise.

Anthem Blue Cross notified California regulators and affected individuals of a data breach involving unauthorized access to member portal accounts between October 1 and October 14, 2021. The incident exposed personal information (name, DOB, address, email, phone) and protected health information (healthcare ID). The portal was temporarily shut down, and one year of Experian IdentityWorks was offered to affected members.

Anthem Blue Cross erroneously displayed provider Tax Identification Numbers (SSNs) and business addresses on a PDF posted to its website from Oct 23-24, 2013. The error was discovered and the files were removed and corrected. Anthem offered one year of free identity protection services to affected providers.