Breachesby GlyphBlueCross BlueShield of Tennessee
Disclosed Nov 1, 20101,023,209 affectedSettled
Theft of 57 unencrypted hard drives exposes data of over 1 million members
Fifty-seven unencrypted hard drives holding recorded customer calls were stolen from a leased BCBST facility in Tennessee, exposing names, Social Security numbers, birth dates and health plan IDs of over 1 million people. It was the first HHS enforcement action under the HITECH breach rule.
What is known
| People affected | 1,023,209 (as reported by the organization) |
|---|---|
| Disclosed | Nov 1, 2010 |
| Attack | Lost or stolen device |
| Data exposed | NamesSocial Security numbersDates of birthInsuranceHealth |
| Sector | Insurance · US |
| Status | Settled |
| Lawsuit or fine | $1.5M HHS OCR HIPAA settlement (2012) (about $1.5M) |
Sources
Notices filed
Other breaches at BlueCross BlueShield of Tennessee
Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,670 affectedHealthcareUSDec 26, 2025Insider breachInsider exposed names and health records. Reported to the HHS archive.2,688 affectedHealthcareUSJul 25, 2023Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,340 affectedInsuranceUSDec 18, 2020
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.