Blue Shield of California notified members of a ransomware attack on OneTouchPoint (OTP), a subcontractor of vendor Matrix Medical Network. OTP detected suspicious network activity on April 28, 2022; Blue Shield learned of the incident on May 20, 2022. Affected members' PHI may have included names, subscriber IDs, diagnoses, medications, addresses, and other health data. No SSNs, driver's licenses, or financial data were accessed. One year of Experian IdentityWorks was offered.