Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Blue Shield of California

5 breaches4.7M affected in allHealthcareblueshieldca.com

Company profile
Google Analytics misconfiguration shared 4.7M members' health dataExposed data exposed names, health records and insurance details. Reported to the California AG.Exposed data4.7M affectedInsuranceUSFeb 28, 2025Hacking breachHacking exposed names and health records. Reported to the California AG.1,506 affectedInsuranceUSJul 12, 2022Hacking breachHacking exposed names and health records. Reported to the California AG.1,519 affectedInsuranceUSOct 27, 2021Insider breachInsider exposed names and health records. Reported to the California AG.21K affectedInsuranceUSJan 14, 2016Breach, details not statedBreach notice filed with the California AG, details not stated.USFeb 18, 2014
About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.

sector2026-09-25
Blue Shield of California, 2016-01-14insurance
attack2026-09-25
Blue Shield of California, 2016-01-14insider
data_types2026-09-25
Blue Shield of California, 2016-01-14["names","health"]
records_basis2026-09-25
Blue Shield of California, 2016-01-14hhs
records2026-09-25
Blue Shield of California, 2016-01-1420764
summary2026-09-25
Blue Shield of California, 2016-01-14On December 7, 2015, Blue Shield of California, the covered entity (CE), discovered that its servers were breached via social engineering at its call centers in Costa Rica. The breach affected 20,764 patients’ protected health information (
sector2026-09-25
Blue Shield of California, 2021-10-27insurance
attack2026-09-25
Blue Shield of California, 2021-10-27hacking
data_types2026-09-25
Blue Shield of California, 2021-10-27["names","health"]
records_basis2026-09-25
Blue Shield of California, 2021-10-27hhs
records2026-09-25
Blue Shield of California, 2021-10-271519
summary2026-09-25
Blue Shield of California, 2021-10-27Blue Shield of California, the covered entity (CE), reported that its business associate (BA) experienced a ransomware attack that compromised the protected health information (PHI) of 1,519 individuals. The PHI involved included names, dat
sector2026-09-25
Blue Shield of California, 2022-07-12insurance
attack2026-09-25
Blue Shield of California, 2022-07-12hacking
data_types2026-09-25
Blue Shield of California, 2022-07-12["names","health"]
records_basis2026-09-25
Blue Shield of California, 2022-07-12hhs
records2026-09-25
Blue Shield of California, 2022-07-121506
summary2026-09-25
Blue Shield of California, 2022-07-12The covered entity (CE), Blue Shield California, reported that a subcontractor of its business associate (BA) was the victim of a ransomware attack affecting the protected health information (PHI) of approximately 1,506 individuals. The PHI
disclosed2026-09-25
Blue Shield of California, 2025-02-282025-02-28
sector2026-09-25
Blue Shield of California, 2025-02-28insurance
attack2026-09-25
Blue Shield of California, 2025-02-28misconfiguration
data_types2026-09-25
Blue Shield of California, 2025-02-28["names","health","insurance","other"]
records_basis2026-09-25
Blue Shield of California, 2025-02-28organization
records2026-09-25
Blue Shield of California, 2025-02-284700000
discovered2026-09-25
Blue Shield of California, 2025-02-282025-02
summary2026-09-25
Blue Shield of California, 2025-02-28Blue Shield of California said Google Analytics on its websites was misconfigured from April 2021 to January 2024, sending member data such as insurance plan details, claim dates, providers and search terms to Google Ads; it notified 4.7 mi
title2026-09-25
Blue Shield of California, 2025-02-28Google Analytics misconfiguration shared 4.7M members' health data
domain2026-09-25
Blue Shield of Californiablueshieldca.com
records2026-09-25
Blue Shield of California, 2025-02-281543
sector2026-09-25
Blue Shield of California, 2025-02-28health