Breachesby GlyphBlueCross BlueShield of Tennessee
Disclosed Jul 25, 20232,688 affectedConfirmed
BlueCross BlueShield of Tennessee, the business associate (BA), reported that it inadvertently posted the protected health information (PHI) of 717 individuals to the Internet. The PHI involved included subscriber/member identification numbers. The BA notified HHS and affected individuals. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect sensitive data.
What is known
| People affected | 2,688 (as reported to HHS) |
|---|---|
| Disclosed | Jul 25, 2023 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at BlueCross BlueShield of Tennessee
Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,670 affectedHealthcareUSDec 26, 2025Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,340 affectedInsuranceUSDec 18, 2020Theft of 57 unencrypted hard drives exposes data of over 1 million membersLost or stolen device exposed names, Social Security numbers, dates of birth, insurance details and health records.Lost or stolen device1.0M affectedInsuranceUSNov 1, 2010