Blue Cross of Idaho

Blue Cross of Idaho suffered a data breach incident that had exposed the personal information of about 5,600 customers.

The information included names, subscriber or enrollee numbers, dates of service, provider names, patient account numbers, claim number and payment data, and procedure codes.

The attack was aimed to fraudulently reroute financial transactions made by providers, however the attackers were soon knocked out of their servers and situation was controlled.

Source: https://securityaffairs.co/wordpress/83988/data-breach/blue-cross-idaho-data-breach.html

TPRM report: https://scoringcyber.rankiteo.com/company/blue-cross-of-idaho

"id": "blu2109222",
"linkid": "blue-cross-of-idaho",
"type": "Breach",
"date": "03/2019",
"severity": "90",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 5600,
                        'industry': 'Healthcare',
                        'location': 'Idaho',
                        'name': 'Blue Cross of Idaho',
                        'type': 'Health Insurance Provider'}],
 'attack_vector': 'Fraudulent Financial Transaction Rerouting',
 'data_breach': {'number_of_records_exposed': 5600,
                 'personally_identifiable_information': ['names',
                                                         'subscriber or '
                                                         'enrollee numbers',
                                                         'dates of service',
                                                         'provider names',
                                                         'patient account '
                                                         'numbers',
                                                         'claim number and '
                                                         'payment data',
                                                         'procedure codes'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['personal information',
                                              'financial transaction data']},
 'description': 'Blue Cross of Idaho suffered a data breach incident that '
                'exposed the personal information of about 5,600 customers. '
                'The information included names, subscriber or enrollee '
                'numbers, dates of service, provider names, patient account '
                'numbers, claim number and payment data, and procedure codes. '
                'The attack was aimed to fraudulently reroute financial '
                'transactions made by providers, however the attackers were '
                'soon knocked out of their servers and situation was '
                'controlled.',
 'impact': {'data_compromised': ['names',
                                 'subscriber or enrollee numbers',
                                 'dates of service',
                                 'provider names',
                                 'patient account numbers',
                                 'claim number and payment data',
                                 'procedure codes']},
 'motivation': 'Financial Gain',
 'title': 'Blue Cross of Idaho Data Breach',
 'type': 'Data Breach'}