← Excellus BlueCross BlueShield

2015 — Excellus BlueCross BlueShield: Dec 2013–Aug 2015 (disclosed Sep 2015), 10.0M records

2015 10.0M records affected Share on X

Data compromised

Names, DOB, SSNs, addresses, phones, member IDs, financial, claims

Technical writeup

Dec 2013–Aug 2015 (disclosed Sep 2015). Unauthorized access to patient database. ~7M Excellus BCBS customers and ~3.5M Lifetime Healthcare Companies individuals. Exposed: names, DOB, SSNs, addresses, phones, member IDs, financial info, claims. Mandiant forensic review; FBI investigation. $5.1M HIPAA settlement 2021.

Root cause

Unauthorized access; delayed detection.

References