Blue Shield of California notified the California AG that an employee emailed a confidential spreadsheet containing insurance brokers' PII (including SSN/TIN, name, address, phone, email) to a personal email address on June 17, 2022, and again on October 30, 2022. The incident was discovered on October 30, 2022. The employee's access was disabled, and they were directed to delete the data. Blue Shield is strengthening detection tools and offering one year of credit monitoring.