Health Plan · Archived
CareFirst Blue Cross Blue Shield
1,300,000 individuals · submitted May 20, 2015
About this report
The covered entity (CE), CareFirst Blue Cross Blue Shield, reported that it was the victim of a cyberattack that affected the electronic protected health information (ePHI) of approximately 1.3 million individuals. The ePHI involved included names, health insurance information, usernames, email addresses, and dates of birth. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI. OCR obtained assurances that the CE implemented the corrective actions noted.
Summary as published by the HHS Office for Civil Rights.
- Organization
- CareFirst Blue Cross Blue Shield
- State
- MD
- Entity type
- Health Plan
- Individuals affected
- 1,300,000
- Submission date
- May 20, 2015
- Breach type
- Hacking/IT Incident
- Location of information
- Network Server
- Business associate present
- No
- OCR status
- Archived
More breach reports in MD
MD · Sep 3, 2026
District of Columbia, Department of Health Care Finance
399,086 individuals
MD · Jul 30, 2026
Pennsylvanie Dermatology Partners
500 individuals
MD · Apr 17, 2026
ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic Partners
7,213 individuals
MD · Mar 25, 2026
Medi-Rents & Sales, Inc.
1,524 individuals
MD · Feb 2, 2026
Mindoula Health, Inc.
626 individuals
MD · Feb 2, 2026
MCS, P.C.
3,478 individuals
More Hacking/IT Incident reports
NY · Oct 9, 2026
Photon Health
30,625 individuals
CA · Oct 9, 2026
Allswell Health Medical Group PA
638 individuals
WA · Oct 8, 2026
Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish
3,059 individuals
NY · Oct 8, 2026
Cognitive Health Technologies LLC
49,467 individuals
GA · Oct 7, 2026
The Speech Clinic, LLC
2,168 individuals
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals