On December 18, 2020, the Maine Office of the Attorney General reported a data breach involving BlueCross BlueShield of Tennessee, Inc. The breach, which occurred from June 24 to July 1, 2020, was due to unauthorized access to email accounts of their vendor, EyeMed Vision Care, potentially affecting 1,340 individuals, including 3 Maine residents, with Social Security numbers being among the compromised information. BlueCross notified affected Maine residents on December 9, 2020.

Some member reports from BlueCross BlueShield of Tennessee were delivered to group benefit administrators due to a computer error. By mistakenly delivering a report titled the June 2017 Future Termination of Dependent Coverage, 657 employers that have accounts with BCBST obtained information intended for other businesses. The report contained information on 2,100 members, including their names, birthdates, plan types, dates of coverage, and member identification numbers. The compromised data did not include social security numbers, addresses, bank or financial information, or health information. On July 5, BCBST became aware of the intrusion. The reports were sent to companies, who were instructed to delete them and certify their destruction with the insurance. People whose information was compromised were notified with a letter and offered a free identity protection service for up to two years.