Skip to content
Breaches.

Premera Blue Cross

Disclosed Mar 5, 20233 years ago33,212 affectedConfirmed

Official notice

The covered entity (CE), Premera Blue Cross, reported that a software application used by its business associate (BA) exposed the protected health information (PHI) of 33,212 individuals. The PHI involved included names, addresses, dates of birth, phone numbers, and health insurance information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE and BA implemented additional administrative and technical safeguards to better protect PHI.

What is known

People affected33,212 (as reported to HHS)
DisclosedMar 5, 2023
DiscoveredOct 20, 2023
HappenedMay 30, 2023
AttackHacking
Data exposedNames, Health
SectorFinance · US
StatusConfirmed

Sources

Source
Washington Attorney General breach notice: Premera Blue Crossatg.wa.gov · Official notice
HHS OCR breach report (archive, resolved): Premera Blue Cross (Health Plan, WA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
Washington AGresidents of WAMar 5, 202336,211
Washington AGresidents of WAJul 10, 202333,237
HHS archivetotalAug 8, 202333,212
Washington AGresidents of WAApr 19, 20242,384

Other breaches at Premera Blue Cross

BreachAffected
Disclosed Jul 18, 2022Jul 18, 20224 years agoRansomwareUnknown
Cyberattack on Pacific Northwest health insurer exposes 10.4 million peopleMar 17, 201511 years agoPhishing11M
History of this record
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 33212 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Premera Blue Cross, reported that a software application used by its business associate (BA) exposed the protected health information (PHI) of 33,212 individuals. The PHI involved included names, addresses, dates of · backfill source
  • 2026-09-25 · disclosed: 2023-07-10 to 2023-03-05 · backfill source
  • 2026-09-25 · disclosed: 2024-04-19 to 2023-07-10 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Premera Blue Cross

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.