BBT
Company Details
Linkedin ID:
bcbst
Website:
Employees number:
4,877
Number of followers:
40,691
NAICS:
524
Industry Type:
Homepage:
http://www.bcbst.com
IP Addresses:
0
Company ID:
BLU_4706375
Scan Status:
In-progress
BlueCross BlueShield of Tennessee Company CyberSecurity Posture
http://www.bcbst.com
As Tennessee's largest health plan, we've been helping Tennesseans find their own unique paths to good health for more than 70 years. More than that, we're your neighbors and friends – fellow Tennesseans with deep roots of caring tradition, a focused approach to physical, financial and community good health for today, and a bright outlook for an even healthier tomorrow. Our mission is simple: peace of mind through better health. We're an independent, not-for-profit, locally governed health plan company – meaning we live and work alongside our Tennessee business customers and plan members. Our 6,000 employees across the state have built our strong reputation for integrity, excellent service and community leadership. But we are also part of the BlueCross BlueShield Association, a nationwide association of health care plans. Because of this, our plan members have access to the same quality health benefits while traveling or living out of state that they have while in Tennessee. © 2018 BlueCross BlueShield of Tennessee, Inc., an Independent Licensee of the BlueCross BlueShield Association.
BlueCross BlueShield of Tennessee A.I CyberSecurity Scoring
BBT Risk Score (AI oriented)Between 700 and 749
BBT
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
BBT Global Score (TPRM)XXXX
BBT
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
BBT Company CyberSecurity News & History
Past Incidents
2
Attack Types
2
BlueCross BlueShield of Tennessee, Inc.
Breach
Rankiteo Explanation
Attack with significant impact with internal employee data leaks
Description: On December 18, 2020, the Maine Office of the Attorney General reported a data breach involving BlueCross BlueShield of Tennessee, Inc. The breach, which occurred from June 24 to July 1, 2020, was due to unauthorized access to email accounts of their vendor, EyeMed Vision Care, potentially affecting 1,340 individuals, including 3 Maine residents, with Social Security numbers being among the compromised information. BlueCross notified affected Maine residents on December 9, 2020.
BlueCross BlueShield of Tennessee
Data Leak
Rankiteo Explanation
Attack limited on finance or reputation
Description: Some member reports from BlueCross BlueShield of Tennessee were delivered to group benefit administrators due to a computer error. By mistakenly delivering a report titled the June 2017 Future Termination of Dependent Coverage, 657 employers that have accounts with BCBST obtained information intended for other businesses. The report contained information on 2,100 members, including their names, birthdates, plan types, dates of coverage, and member identification numbers. The compromised data did not include social security numbers, addresses, bank or financial information, or health information. On July 5, BCBST became aware of the intrusion. The reports were sent to companies, who were instructed to delete them and certify their destruction with the insurance. People whose information was compromised were notified with a letter and offered a free identity protection service for up to two years.
BBT Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for BBT
Incidents vs Insurance Industry Average (This Year)
No incidents recorded for BlueCross BlueShield of Tennessee in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for BlueCross BlueShield of Tennessee in 2025.
Incident Types BBT vs Insurance Industry Avg (This Year)
No incidents recorded for BlueCross BlueShield of Tennessee in 2025.
Incident History — BBT (X = Date, Y = Severity)
BBT cyber incidents detection timeline including parent company and subsidiaries
BBT Company Subsidiaries
As Tennessee's largest health plan, we've been helping Tennesseans find their own unique paths to good health for more than 70 years. More than that, we're your neighbors and friends – fellow Tennesseans with deep roots of caring tradition, a focused approach to physical, financial and community good health for today, and a bright outlook for an even healthier tomorrow. Our mission is simple: peace of mind through better health. We're an independent, not-for-profit, locally governed health plan company – meaning we live and work alongside our Tennessee business customers and plan members. Our 6,000 employees across the state have built our strong reputation for integrity, excellent service and community leadership. But we are also part of the BlueCross BlueShield Association, a nationwide association of health care plans. Because of this, our plan members have access to the same quality health benefits while traveling or living out of state that they have while in Tennessee. © 2018 BlueCross BlueShield of Tennessee, Inc., an Independent Licensee of the BlueCross BlueShield Association.
Loading...
BBT Similar Companies
Bankers Life
Bankers Life® focuses on the insurance and investment needs of middle-income Americans who are near or in retirement. The Bankers Life brand is part of CNO Financial Group, Inc. (NYSE: CNO), whose companies provide insurance and wealth management solutions that help protect the health and retirement
CNO Financial Group
CNO Financial Group, Inc. (NYSE: CNO) secures the future of middle-income America. CNO provides life and health insurance, annuities, financial services, and workforce benefits solutions through our family of brands, including Bankers Life, Colonial Penn, Optavise and Washington National. Our cus
HUB International
Hi, we’re HUB. We advise businesses and individuals on how to reach their goals. When you partner with us, you’re at the center of a vast network of risk, insurance, employee benefits, retirement and wealth management specialists that bring clarity to a changing world with tailored solutions and un
Swiss Re
The Swiss Re Group is a leading wholesale provider of reinsurance, insurance and other insurance-based forms of risk transfer. Dealing direct and working through brokers, its global client base consists of insurance companies, mid-to-large-sized corporations and public sector clients. From standard
FWD Insurance
FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 34 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler ins
GNP Seguros
Somos la empresa aseguradora multirramo 100% mexicana de mayor experiencia y solidez de nuestro país. Por más de 116 años hemos protegido a las familias mexicanas, respaldando sus sueños, historias, emociones y vivencias. Estamos orgullosos de formar parte de uno de los conglomerados empresariales
Seguros SURA
SURA es una compañía que integra en diferentes empresas soluciones en seguros y seguridad social. Su marca se presenta a los clientes como Seguros SURA, ARL SURA y EPS SURA. Existen otras marcas y empresas, especialmente de prestación de servicios, que hacen parte de la Compañía. Nuestra experienc
State Life Insurance Pakistan
The Life Insurance Business in Pakistan was nationalized in March 1972. Initially, the Life Insurance business of 32 Insurance Companies was merged and placed under three Beema Units named “A”, “B” and “C” Beema Units. However, later these Beema Units were merged, and effective November 1, 1972, the
Prudential Indonesia (PT Prudential Life Assurance)
Listening. Understanding. Delivering. At Prudential Indonesia we deliver excellence by consistently innovating, creating new opportunities and growing our business to cater all of our customers' needs. With a vision of becoming truly world class, Prudential Indonesia provides quality services and
.png)
BBT CyberSecurity News
November 21, 2025 08:00 AM
Security scrubbing
Nov 21st, 2025 - Healthcare workers are becoming increasingly important in fighting off potential cyberattacks.
November 17, 2025 08:00 AM
10.5M records exposed: Conduent faces massive litigation over the 8th largest healthcare data breach in U.S. history
Conduent is facing a growing wave of federal class action lawsuits after a massive data breach exposed the personal and health information...
October 26, 2025 07:00 AM
Healthcare Data Breach Statistics
In 2023, 725 data breaches were reported to OCR and across those breaches, more than 133 million records were exposed or impermissibly disclosed.
September 13, 2025 07:00 AM
Hamilton County employers cutting staff as nationwide signs point to ‘economic cooling’
In July, Wacker Chemical Corp. announced it would lay off 90 workers at its polysilicon plant in Bradley County, and a maker of asphalt...
September 08, 2025 07:00 AM
BlueCross BlueShield layoffs begin: 150 workers cut in Tennessee
At least 150 employees in Chattanooga will be phased out of their jobs with BlueCross Blue Shield of Tennessee this month.
July 18, 2025 07:00 AM
Summit providers may soon be out-of-network for BlueCross BlueShield, Medicare Advantage
Summit Medical Group is not planning to renew its contract with BlueCross BlueShield of Tennessee (BCBST) after it says they have been...
July 13, 2025 07:00 AM
Wikipedia’s List Of The Largest Data Breaches Globally Since 2004
Compilation of cyberattacks by organization type and number of records compromised.
July 03, 2025 07:00 AM
BlueCross BlueShield of Tennessee WARN Act Investigation
Strauss Borrelli PLLC, a leading class action law firm, is investigating BlueCross BlueShield of Tennessee in Chattanooga, Tennessee...
February 22, 2025 08:00 AM
Top 10 Tech Companies to Work for in Memphis in 2025
Explore the top tech companies in Memphis, 2025. Discover diverse opportunities and innovation in FedEx, St. Jude, PathAI, and more.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
BBT CyberSecurity History Information
Official Website of BlueCross BlueShield of Tennessee
The official website of BlueCross BlueShield of Tennessee is http://www.bcbst.com.
BlueCross BlueShield of Tennessee’s AI-Generated Cybersecurity Score
According to Rankiteo, BlueCross BlueShield of Tennessee’s AI-generated cybersecurity score is 735, reflecting their Moderate security posture.
How many security badges does BlueCross BlueShield of Tennessee’ have ?
According to Rankiteo, BlueCross BlueShield of Tennessee currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does BlueCross BlueShield of Tennessee have SOC 2 Type 1 certification ?
According to Rankiteo, BlueCross BlueShield of Tennessee is not certified under SOC 2 Type 1.
Does BlueCross BlueShield of Tennessee have SOC 2 Type 2 certification ?
According to Rankiteo, BlueCross BlueShield of Tennessee does not hold a SOC 2 Type 2 certification.
Does BlueCross BlueShield of Tennessee comply with GDPR ?
According to Rankiteo, BlueCross BlueShield of Tennessee is not listed as GDPR compliant.
Does BlueCross BlueShield of Tennessee have PCI DSS certification ?
According to Rankiteo, BlueCross BlueShield of Tennessee does not currently maintain PCI DSS compliance.
Does BlueCross BlueShield of Tennessee comply with HIPAA ?
According to Rankiteo, BlueCross BlueShield of Tennessee is not compliant with HIPAA regulations.
Does BlueCross BlueShield of Tennessee have ISO 27001 certification ?
According to Rankiteo,BlueCross BlueShield of Tennessee is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of BlueCross BlueShield of Tennessee
BlueCross BlueShield of Tennessee operates primarily in the Insurance industry.
Number of Employees at BlueCross BlueShield of Tennessee
BlueCross BlueShield of Tennessee employs approximately 4,877 people worldwide.
Subsidiaries Owned by BlueCross BlueShield of Tennessee
BlueCross BlueShield of Tennessee presently has no subsidiaries across any sectors.
BlueCross BlueShield of Tennessee’s LinkedIn Followers
BlueCross BlueShield of Tennessee’s official LinkedIn profile has approximately 40,691 followers.
NAICS Classification of BlueCross BlueShield of Tennessee
BlueCross BlueShield of Tennessee is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.
BlueCross BlueShield of Tennessee’s Presence on Crunchbase
No, BlueCross BlueShield of Tennessee does not have a profile on Crunchbase.
BlueCross BlueShield of Tennessee’s Presence on LinkedIn
Yes, BlueCross BlueShield of Tennessee maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bcbst.
Cybersecurity Incidents Involving BlueCross BlueShield of Tennessee
As of December 23, 2025, Rankiteo reports that BlueCross BlueShield of Tennessee has experienced 2 cybersecurity incidents.
Number of Peer and Competitor Companies
BlueCross BlueShield of Tennessee has an estimated 15,102 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at BlueCross BlueShield of Tennessee ?
Incident Types: The types of cybersecurity incidents that have occurred include Data Leak and Breach.
How does BlueCross BlueShield of Tennessee detect and respond to cybersecurity incidents ?
Detection and Response: The company detects and responds to cybersecurity incidents through an containment measures with employers were instructed to delete the reports and certify their destruction, and communication strategy with people whose information was compromised were notified with a letter and offered a free identity protection service for up to two years..
Incident Details
Can you provide details on each incident ?
Title: BlueCross BlueShield of Tennessee Data Breach
Description: Some member reports from BlueCross BlueShield of Tennessee were delivered to group benefit administrators due to a computer error. The report contained information on 2,100 members, including their names, birthdates, plan types, dates of coverage, and member identification numbers.
Date Detected: 2017-07-05
Type: Data Breach
Attack Vector: Computer Error
Vulnerability Exploited: Data Mishandling
Title: BlueCross BlueShield of Tennessee Data Breach
Description: Unauthorized access to email accounts of vendor EyeMed Vision Care, potentially affecting 1,340 individuals, including 3 Maine residents.
Date Detected: 2020-12-18
Date Publicly Disclosed: 2020-12-18
Type: Data Breach
Attack Vector: Unauthorized Access
Vulnerability Exploited: Email Accounts
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Breach.
How does the company identify the attack vectors used in incidents ?
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Email Accounts.
Impact of the Incidents
What was the impact of each incident ?
Incident : Data Breach BLU1151261022
Data Compromised: Names, Birthdates, Plan types, Dates of coverage, Member identification numbers
Incident : Data Breach BCB718072825
Data Compromised: Social security numbers
What types of data are most commonly compromised in incidents ?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Birthdates, Plan Types, Dates Of Coverage, Member Identification Numbers, , Social Security Numbers and .
Which entities were affected by each incident ?
Incident : Data Breach BLU1151261022
Entity Name: BlueCross BlueShield of Tennessee
Entity Type: Health Insurance
Industry: Healthcare
Location: Tennessee
Customers Affected: 2100
Incident : Data Breach BCB718072825
Entity Name: BlueCross BlueShield of Tennessee, Inc.
Entity Type: Health Insurance
Industry: Healthcare
Location: Tennessee
Customers Affected: 1340
Response to the Incidents
What measures were taken in response to each incident ?
Incident : Data Breach BLU1151261022
Containment Measures: Employers were instructed to delete the reports and certify their destruction
Communication Strategy: People whose information was compromised were notified with a letter and offered a free identity protection service for up to two years
Data Breach Information
What type of data was compromised in each breach ?
Incident : Data Breach BLU1151261022
Type of Data Compromised: Names, Birthdates, Plan types, Dates of coverage, Member identification numbers
Number of Records Exposed: 2100
Sensitivity of Data: Medium
Personally Identifiable Information: NamesBirthdatesMember Identification Numbers
Incident : Data Breach BCB718072825
Type of Data Compromised: Social security numbers
Number of Records Exposed: 1340
Sensitivity of Data: High
How does the company handle incidents involving personally identifiable information (PII) ?
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by employers were instructed to delete the reports and certify their destruction.
References
Where can I find more information about each incident ?
Incident : Data Breach BLU1151261022
Source: BlueCross BlueShield of Tennessee
Incident : Data Breach BCB718072825
Source: Maine Office of the Attorney General
Date Accessed: 2020-12-18
Where can stakeholders find additional resources on cybersecurity best practices ?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: BlueCross BlueShield of Tennessee, and Source: Maine Office of the Attorney GeneralDate Accessed: 2020-12-18.
Investigation Status
How does the company communicate the status of incident investigations to stakeholders ?
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through People whose information was compromised were notified with a letter and offered a free identity protection service for up to two years.
Stakeholder and Customer Advisories
Were there any advisories issued to stakeholders or customers for each incident ?
Incident : Data Breach BLU1151261022
Customer Advisories: Letter notification and offer of free identity protection service
What advisories does the company provide to stakeholders and customers following an incident ?
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was Letter notification and offer of free identity protection service.
Initial Access Broker
How did the initial access broker gain entry for each incident ?
Incident : Data Breach BCB718072825
Entry Point: Email Accounts
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident ?
Incident : Data Breach BLU1151261022
Root Causes: Computer Error
Additional Questions
Incident Details
What was the most recent incident detected ?
Most Recent Incident Detected: The most recent incident detected was on 2017-07-05.
What was the most recent incident publicly disclosed ?
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2020-12-18.
Impact of the Incidents
What was the most significant data compromised in an incident ?
Most Significant Data Compromised: The most significant data compromised in an incident were Names, Birthdates, Plan Types, Dates of Coverage, Member Identification Numbers, , Social Security numbers and .
Response to the Incidents
What containment measures were taken in the most recent incident ?
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Employers were instructed to delete the reports and certify their destruction.
Data Breach Information
What was the most sensitive data compromised in a breach ?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Member Identification Numbers, Names, Birthdates, Plan Types, Dates of Coverage and Social Security numbers.
What was the number of records exposed in the most significant breach ?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 344.0.
References
What is the most recent source of information about an incident ?
Most Recent Source: The most recent source of information about an incident are BlueCross BlueShield of Tennessee and Maine Office of the Attorney General.
Stakeholder and Customer Advisories
What was the most recent customer advisory issued ?
Most Recent Customer Advisory: The most recent customer advisory issued was an Letter notification and offer of free identity protection service.
Initial Access Broker
What was the most recent entry point used by an initial access broker ?
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Email Accounts.
.png)
Latest Global CVEs (Not Company-Specific)
Description
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
- https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_FH1201/SetIpBind/SetIpBind.md
- https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_FH1201/SetIpBind/SetIpBind.md#reproduce
- https://vuldb.com/?ctiid.337689
- https://vuldb.com/?id.337689
- https://vuldb.com/?submit.719154
- https://www.tenda.com.cn/
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=bcbst' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
