Health Plan · Archived
CareFirst Blue Cross Blue Shield
6,200 individuals · submitted April 26, 2018
About this report
The covered entity (CE), CareFirst Blue Cross Blue Shield, reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 6,200 individuals. The ePHI involved included names, dates of birth, Social Security numbers, and health insurance information. The CE notified HHS and affected individuals. In response to the breach, the CE implemented additional technical safeguards and retrained its staff on recognizing and responding to fraudulent email communications. OCR obtained assurances that the CE implemented the corrective actions noted.
Summary as published by the HHS Office for Civil Rights.
- Organization
- CareFirst Blue Cross Blue Shield
- State
- MD
- Entity type
- Health Plan
- Individuals affected
- 6,200
- Submission date
- April 26, 2018
- Breach type
- Hacking/IT Incident
- Location of information
- Business associate present
- No
- OCR status
- Archived
More breach reports in MD
MD · Sep 3, 2026
District of Columbia, Department of Health Care Finance
399,086 individuals
MD · Jul 30, 2026
Pennsylvanie Dermatology Partners
500 individuals
MD · Apr 17, 2026
ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic Partners
7,213 individuals
MD · Mar 25, 2026
Medi-Rents & Sales, Inc.
1,524 individuals
MD · Feb 2, 2026
Mindoula Health, Inc.
626 individuals
MD · Feb 2, 2026
MCS, P.C.
3,478 individuals
More Hacking/IT Incident reports
NY · Oct 9, 2026
Photon Health
30,625 individuals
CA · Oct 9, 2026
Allswell Health Medical Group PA
638 individuals
WA · Oct 8, 2026
Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish
3,059 individuals
NY · Oct 8, 2026
Cognitive Health Technologies LLC
49,467 individuals
GA · Oct 7, 2026
The Speech Clinic, LLC
2,168 individuals
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals