Blue Cross of California

Disclosed Oct 26, 2021672 affectedConfirmed

The covered entity (CE), Blue Cross of California, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 672 individuals. The ePHI involved included names, gender, email addresses, phone numbers, home addresses, Social Security numbers, health insurance information, and other treatment information.

What is known

People affected	672 (as reported to HHS)
Disclosed	Oct 26, 2021
Happened	Aug 25, 2021
Attack	Hacking
Data exposed	NamesHealth
Sector	Insurance · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Blue Cross of California

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Blue Cross of California (Health Plan, IN)

Notices filed

Residents of CAOct 26, 2021

California AGCount not stated

TotalOct 27, 2021

HHS archive672 people

History of this record

sector2026-09-25

other to insuranceby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 672by backfillSource

summary2026-09-25

empty to The covered entity (CE), Blue Cross of California, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 672 individuals. The ePHI involved included namby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Blue Cross of California