The Washington State Office of the Attorney General reported that Premera Blue Cross experienced a ransomware attack on May 31, 2023, affecting 33,237 members. The compromised data included member ID numbers, names, addresses, dates of birth, plan names, contract numbers, genders, and email addresses, but excluded claims information and Social Security numbers. The breach was notified on July 10, 2023.

The Washington State Office of the Attorney General disclosed a data breach affecting Premera Blue Cross on March 5, 2023, stemming from unauthorized access via Fortra LLC’s GoAnywhere MFT service. The breach, initiated on January 28, 2023, compromised the personal data of 36,211 Washington residents and a total of 173,989 members. Exposed information included names, member IDs, dates of birth, gender, and email addresses, though Social Security numbers and financial details remained uncompromised. The incident highlights vulnerabilities in third-party file transfer services, raising concerns over the protection of sensitive healthcare-related data. While no financial or highly sensitive identifiers (e.g., SSNs) were leaked, the exposure of personal identifiers poses risks of identity theft, phishing, or targeted scams for affected individuals. Premera Blue Cross, a major health insurance provider, has previously faced breaches, underscoring persistent cybersecurity challenges in the healthcare sector. The breach did not involve ransomware or direct financial harm but emphasized gaps in securing third-party vendor systems.

The Washington State Office of the Attorney General reported a data breach involving Premera Blue Cross on July 18, 2022. The breach, which occurred due to a ransomware attack that initiated on April 27, 2022, potentially affected 1,314 individuals, including 1,303 residents of Washington State. Personal Health Information (PHI) such as names, member IDs, and medical information may have been compromised.

The California Office of the Attorney General reported that Premera Blue Cross experienced a data breach due to a sophisticated cyberattack, which was discovered on January 29, 2015. The breach potentially exposed personal information including names, addresses, Social Security numbers, and bank account information, but the exact number of affected individuals is not specified. Premera is providing two years of free credit monitoring and identity theft protection services to those affected.