Blue Shield of California data breach
Blue Shield of California appears in 15 breach notices filed with California AG, HHS OCR, Maryland AG and Montana DOJ, most recently reported on July 21, 2025.
Also listed as: Blue Shield of California (BSC)
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| Jul 21, 2025 | California AG | Mar 25, 2025, May 22, 2025 | Not listed | Not listed | California AG list ↗ |
| Jun 23, 2025 | California AG | Apr 25, 2025 | Not listed | Not listed | California AG list ↗ |
| Jun 23, 2025 | HHS OCR | Not listed | 673 people (total reported to HHS) | Not listed | HHS OCR list ↗ |
| Jun 6, 2025 | California AG | Apr 4, 2025 | Not listed | Not listed | California AG list ↗ |
| Apr 9, 2025 | California AG | Apr 1, 2021 | Not listed | Not listed | California AG list ↗ |
| Mar 28, 2025 | California AG | Oct 28, 2024, Nov 11, 2024 | Not listed | Not listed | California AG list ↗ |
| Jul 24, 2023 | Maryland AG | Not listed | 3 Maryland residents | NameSocial Security numberDate of birthMedical informationHealth insurance information | Notice ↗ |
| Mar 24, 2023 | Maryland AG | Not listed | 2,103 Maryland residents | NameDate of birthEmail addressAddressPhone number | Notice ↗ |
| Dec 22, 2022 | California AG | Jun 17, 2022, Oct 30, 2022 | Not listed | Not listed | California AG list ↗ |
| Dec 22, 2022 | Montana DOJ | Jun 17, 2022 – Oct 30, 2022 | 2 Montana residents | Not listed | Notice ↗ |
| Jul 12, 2022 | California AG | Apr 28, 2022 | Not listed | Not listed | California AG list ↗ |
| Oct 27, 2021 | California AG | Aug 25, 2021 | Not listed | Not listed | California AG list ↗ |
| Jan 14, 2016 | California AG | Sep 15, 2015, Dec 17, 2015 | Not listed | Not listed | California AG list ↗ |
| Jul 3, 2014 | California AG | Feb 28, 2013, Mar 31, 2013, Apr 30, 2013 | Not listed | Not listed | California AG list ↗ |
| Feb 18, 2014 | California AG | Dec 20, 2013 | Not listed | Not listed | California AG list ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for Blue Shield of California right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.