Regence BlueCross BlueShield of Oregon

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

The breach at Regence BlueCross BlueShield of Oregon was part of a larger data breach incident involving the U.S. healthcare services business Welltok. This breach affected approximately 8.5 million patients and was the result of a widespread hacking campaign that exploited a zero-day vulnerability in the MOVEit Transfer program. The compromised data included patient information such as phone numbers, physical addresses, email addresses, and full names. Additionally, specific health insurance details, Medicare/Medicaid ID numbers, and Social Security numbers (SSNs) for some individuals were also obtained by the threat actors. Regence BlueCross BlueShield of Oregon was among the organizations on behalf of which Welltok was delivering notice to affected individuals. Other affected organizations included Asuris Northwest Health, BridgeSpan Health, Blue Cross and Blue Shield of Minnesota, Blue Cross and Blue Shield of Alabama, Blue Cross and Blue Shield of Kansas, Blue Cross and Blue Shield of North Carolina, Corewell Health, Faith Regional Health Services, Mass General, Brigham Health Plan, Priority Health, Regence BlueShield, Regence BlueCross BlueShield of Utah, Regence Blue Shield of Idaho, St. Bernards Healthcare, and Sutter Health[6].

Citations:

  1. https://www.regence.com/home
  2. https://www.regence.com/fraud
  3. https://news.regence.com/releases/regence-paid-2-26-billion-for-member-care-in-oregon-in-2022
  4. https://www.oregonlive.com/business/2023/12/providence-may-declare-regence-blue-cross-out-of-network.html
  5. https://www.regence.com/protect-yourself
  6. https://blog.rankiteo.com/reg41271123-regence-bluecross-blueshield-of-oregon-breach-november-2023/
  7. https://www.regence.com/contact-us
  8. https://news.regence.com/blog/questions-about-anthem-cyber-attack
  9. https://news.regence.com/blog/premera-cyber-attack
  10. https://www.kgw.com/article/news/health/oregonians-regence-insurance-could-lose-coverage-providence/283-419bbac8-bd2c-4a0e-befb-78706029037d
  11. https://news.regence.com/about-us
  12. https://www.regence.com/member/for-members
  13. https://www.oregonclinic.com/newsroom/regence-blue-cross-blue-shield-and-providence-health-contract-negotiation-update/
  14. https://www.nclrights.org/our-work/cases/ketcham-v-regence-bluecross-blueshield-of-oregon/
  15. https://www.fiercehealthcare.com/payer/regence-faces-backlash-over-ending-ppo-benefits
  16. https://www.regence.com/member/shop-individual
  17. https://www.thelundreport.org/content/rate-clash-between-regence-bluecross-blueshield-providence-could-affect-260000
Breach Submission Date Jan 18, 2024
Converted Entity Name Regence BlueCross BlueShield of Oregon
Converted Entity Type Health Plan
State OR
Individuals Affected 856
Breach Type Unauthorized Access/Disclosure

Breach Information Location Paper/Films

Business Associate Present Yes