California Physicians' Services

Blue Shield of California, acting as a business associate, experienced an external system breach (hacking) from January 28, 2023, to January 31, 2023. The incident was discovered on January 30, 2023. The breach affected 44 Maine residents, who were notified via written communication on March 27, 2023. The company offered one year of complimentary credit monitoring and identity theft restoration services to those affected.

Affected (this filing):

Blue Shield of California notified members that a third-party subcontractor, Fortra, LLC, suffered a cybersecurity incident between January 28-31, 2023. An unauthorized individual accessed Fortra's GoAnywhere MFTaaS application and potentially exfiltrated files maintained by Blue Shield's provider, Brightline Medical Associates. Affected data included names, addresses, dates of birth, gender, subscriber IDs, phone numbers, emails, and plan information. No SSNs or financial data were accessed. Blue Shield locked communications with Brightline and offered one year of Experian IdentityWorks.

California Physicians' Services d/b/a Blue Shield of California reported to HHS on 2023-04-04 a Hacking/IT Incident affecting 61,788 individuals. Breached information located on Network Server. The incident involved a business associate's subcontractor. PHI included names, dates of birth, and addresses.

Affected (this filing): 61,788

California Physicians' Services dba Blue Shield of California reported to HHS on 2023-04-05 a Hacking/IT Incident affecting 1,553 individuals. The breach occurred at a subcontractor of the covered entity's business associate, impacting PHI stored on a network server. PHI exposed included names, dates of birth, and addresses. The CE severed connections to affected servers, implemented additional technical safeguards, and offered credit monitoring to affected individuals.

Affected (this filing): 1,553