The covered entity (CE), Blue Shield of California, reported that its business associate (BA) Sharecare Health Data Services, LLC, was the victim of a cyber-attack affecting the protected health information (PHI) of 18,416 individuals. The PHI involved included names, dates of birth, Social Security numbers, and clinical information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Affected individuals were also provided complimentary credit monitoring services.
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 18416 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Blue Shield of California, reported that its business associate (BA) Sharecare Health Data Services, LLC, was the victim of a cyber-attack affecting the protected health information (PHI) of 18,416 individuals. The · backfill source
2026-09-25 · disclosed: 2019-02-15 to 2018-04-13 · backfill source
