Anthem Blue Cross

Anthem Blue Cross notified California residents that on May 7, 2022, an unauthorized person accessed data from vendor Choice Health and downloaded a file containing PHI. Anthem learned of the incident on August 5, 2022. Affected data included names, health plan carrier names, and potentially addresses, dates of birth, phone numbers, email addresses, Medicare/Medicaid IDs, and Social Security numbers. The vendor enhanced security measures. Some individuals were offered two years of Experian IdentityWorks.

Anthem Blue Cross reported a data security incident involving its legal services provider, Von Behren & Hunter LLP (VBH). On January 24, 2022, VBH discovered unauthorized access to its network. On February 10, 2022, VBH confirmed that certain data was accessed and acquired without authorization. A subsequent review on March 25, 2022, determined that some Anthem Blue Cross members' protected health information (PHI) and personal information (name) may have been stored on the impacted server. VBH engaged the FBI and offered identity protection services to affected individuals. The incident is classified as a third-party vendor compromise.

Anthem Blue Cross notified the California AG of unauthorized access to member portal accounts occurring between October 1 and October 14, 2021, discovered on October 15, 2021. Affected data included names, dates of birth, addresses, emails, phone numbers, and healthcare identification numbers (PHI). The company temporarily shut down the portal and offered one year of Experian IdentityWorks credit monitoring.

Anthem Blue Cross erroneously posted PDF documents containing provider Tax Identification Numbers (TINs), names, and business addresses on its website from October 23 to October 24, 2013. Some providers used their Social Security Numbers as TINs. The documents were removed and corrected within 24 hours. Anthem offered one year of identity protection services to affected providers.