On December 18, 2020, the Maine Office of the Attorney General reported a data breach involving BlueCross BlueShield of Tennessee, Inc. The breach, which occurred from June 24 to July 1, 2020, was due to unauthorized access to email accounts of their vendor, EyeMed Vision Care, potentially affecting 1,340 individuals, including 3 Maine residents, with Social Security numbers being among the compromised information. BlueCross notified affected Maine residents on December 9, 2020.
TPRM report: https://www.rankiteo.com/company/bcbst
"id": "bcb718072825",
"linkid": "bcbst",
"type": "Breach",
"date": "6/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 1340,
'industry': 'Healthcare',
'location': 'Tennessee',
'name': 'BlueCross BlueShield of Tennessee, Inc.',
'type': 'Health Insurance'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'number_of_records_exposed': 1340,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers']},
'date_detected': '2020-12-18',
'date_publicly_disclosed': '2020-12-18',
'description': 'Unauthorized access to email accounts of vendor EyeMed Vision '
'Care, potentially affecting 1,340 individuals, including 3 '
'Maine residents.',
'impact': {'data_compromised': ['Social Security numbers']},
'initial_access_broker': {'entry_point': 'Email Accounts'},
'references': [{'date_accessed': '2020-12-18',
'source': 'Maine Office of the Attorney General'}],
'title': 'BlueCross BlueShield of Tennessee Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Email Accounts'}