Skip to content

Blue Shield of California

5 breaches4.7M affected in allHealthcareblueshieldca.com

BreachAffected
Google Analytics misconfiguration shared 4.7M members' health dataFeb 28, 20251 year agoExposed data4.7M
Disclosed Jul 12, 2022Jul 12, 20224 years agoHacking1,506
Disclosed Oct 27, 2021Oct 27, 20214 years agoHacking1,519
Disclosed Jan 14, 2016Jan 14, 201610 years agoInsider21K
Disclosed Feb 18, 2014Feb 18, 201412 years agoUnknown
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · Blue Shield of California, 2016-01-14 · sector: insurance
  • 2026-09-25 · Blue Shield of California, 2016-01-14 · attack: insider
  • 2026-09-25 · Blue Shield of California, 2016-01-14 · data_types: ["names","health"]
  • 2026-09-25 · Blue Shield of California, 2016-01-14 · records_basis: hhs
  • 2026-09-25 · Blue Shield of California, 2016-01-14 · records: 20764
  • 2026-09-25 · Blue Shield of California, 2016-01-14 · summary: On December 7, 2015, Blue Shield of California, the covered entity (CE), discovered that its servers were breached via social engineering at its call centers in Costa Rica. The breach affected 20,764 patients’ protected health information (
  • 2026-09-25 · Blue Shield of California, 2021-10-27 · sector: insurance
  • 2026-09-25 · Blue Shield of California, 2021-10-27 · attack: hacking
  • 2026-09-25 · Blue Shield of California, 2021-10-27 · data_types: ["names","health"]
  • 2026-09-25 · Blue Shield of California, 2021-10-27 · records_basis: hhs
  • 2026-09-25 · Blue Shield of California, 2021-10-27 · records: 1519
  • 2026-09-25 · Blue Shield of California, 2021-10-27 · summary: Blue Shield of California, the covered entity (CE), reported that its business associate (BA) experienced a ransomware attack that compromised the protected health information (PHI) of 1,519 individuals. The PHI involved included names, dat
  • 2026-09-25 · Blue Shield of California, 2022-07-12 · sector: insurance
  • 2026-09-25 · Blue Shield of California, 2022-07-12 · attack: hacking
  • 2026-09-25 · Blue Shield of California, 2022-07-12 · data_types: ["names","health"]
  • 2026-09-25 · Blue Shield of California, 2022-07-12 · records_basis: hhs
  • 2026-09-25 · Blue Shield of California, 2022-07-12 · records: 1506
  • 2026-09-25 · Blue Shield of California, 2022-07-12 · summary: The covered entity (CE), Blue Shield California, reported that a subcontractor of its business associate (BA) was the victim of a ransomware attack affecting the protected health information (PHI) of approximately 1,506 individuals. The PHI
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · disclosed: 2025-02-28
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · sector: insurance
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · attack: misconfiguration
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · data_types: ["names","health","insurance","other"]
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · records_basis: organization
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · records: 4700000
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · discovered: 2025-02
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · summary: Blue Shield of California said Google Analytics on its websites was misconfigured from April 2021 to January 2024, sending member data such as insurance plan details, claim dates, providers and search terms to Google Ads; it notified 4.7 mi
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · title: Google Analytics misconfiguration shared 4.7M members' health data
  • 2026-09-25 · Blue Shield of California · domain: blueshieldca.com
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · records: 1543
  • 2026-09-25 · Blue Shield of California, 2025-02-28 · sector: health

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.