Blue Cross of California
Disclosed Oct 26, 20214 years ago672 affectedConfirmed
The covered entity (CE), Blue Cross of California, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 672 individuals. The ePHI involved included names, gender, email addresses, phone numbers, home addresses, Social Security numbers, health insurance information, and other treatment information.
What is known
| People affected | 672 (as reported to HHS) |
|---|---|
| Disclosed | Oct 26, 2021 |
| Happened | Aug 25, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Blue Cross of Californiaoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Blue Cross of California (Health Plan, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Oct 26, 2021 | |
| HHS archivetotal | Oct 27, 2021 | 672 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 672 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Blue Cross of California, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 672 individuals. The ePHI involved included nam · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.