Anthem, Inc. notified the California Attorney General of a data security incident involving its vendor, OneDigital. Unauthorized access to OneDigital's system occurred between January 12 and January 21, 2021, and was discovered on November 24, 2021. Affected data may include names, addresses, dates of birth, SSNs, driver's license numbers, and protected health information (PHI) such as medical records and claims data. Anthem is offering one year of credit monitoring to affected individuals.