Premera Blue Cross

The Washington State Office of the Attorney General reported that Premera Blue Cross experienced a ransomware attack on May 31, 2023, affecting 33,237 members. The compromised data included member ID numbers, names, addresses, dates of birth, plan names, contract numbers, genders, and email addresses, but excluded claims information and Social Security numbers. The breach was notified on July 10, 2023.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=15322

TPRM report: https://www.rankiteo.com/company/premera-blue-cross

"id": "pre029072825",
"linkid": "premera-blue-cross",
"type": "Ransomware",
"date": "5/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 33237,
                        'industry': 'Healthcare',
                        'location': 'Washington State',
                        'name': 'Premera Blue Cross',
                        'type': 'Health Insurance Company'}],
 'data_breach': {'number_of_records_exposed': 33237,
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': ['member ID numbers',
                                              'names',
                                              'addresses',
                                              'dates of birth',
                                              'plan names',
                                              'contract numbers',
                                              'genders',
                                              'email addresses']},
 'date_detected': '2023-05-31',
 'date_publicly_disclosed': '2023-07-10',
 'description': 'The Washington State Office of the Attorney General reported '
                'that Premera Blue Cross experienced a ransomware attack on '
                'May 31, 2023, affecting 33,237 members. The compromised data '
                'included member ID numbers, names, addresses, dates of birth, '
                'plan names, contract numbers, genders, and email addresses, '
                'but excluded claims information and Social Security numbers. '
                'The breach was notified on July 10, 2023.',
 'impact': {'data_compromised': ['member ID numbers',
                                 'names',
                                 'addresses',
                                 'dates of birth',
                                 'plan names',
                                 'contract numbers',
                                 'genders',
                                 'email addresses']},
 'references': [{'date_accessed': '2023-07-10',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Premera Blue Cross Ransomware Attack',
 'type': 'Ransomware Attack'}