Back to the register

Blue Shield of California OR Blue Shield of California Promise Health Plan

ArchivedSubmitted 11/17/2023
State
CA
Covered entity type
Business Associate
Individuals affected
27,832
Business associate present
Yes
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
First seen by InfoSec Signals
9/23/2026
Last seen in OCR export
9/23/2026

OCR description

Blue Shield of California OR Blue Shield of California Promise Health Plan, the covered entity (CE), reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 27,832 individuals. The PHI involved included names, Social Security numbers, diagnoses, addresses, birthdates, and claims information. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.

Change history

  • 9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.