Between November 8, 2024, and March 5, 2025, Blue Cross and Blue Shield of Montana (BCBSMT) experienced a data breach that affected the Blue Access for MembersSM (BAM) portal. This portal is used by members to access information about their health insurance coverage.
On February 11, 2025, BCBSMT became aware that certain member information may have been viewed by unauthorized individuals during this period. The breach was reported to the Montana Attorney General's office on April 12, 2025.
A total of 163 Montana residents were affected by this incident, according to the Montana Attorney General’s disclosure.
The information potentially exposed includes both personally identifiable information (PII) and protected health information (PHI): name, address, date of birth, service dates, telephone numbers, fax numbers, email addresses, medical record numbers, health plan beneficiary numbers, account numbers, and medical/dental service and billing information.
After discovering the breach, BCBSMT took steps to address the incident and secure member information. The company has notified affected individuals and is offering a complimentary one-year membership to Experian’s IdentityWorksSM, which provides credit monitoring, identity restoration support, and up to $1 million in identity theft insurance. Affected members are encouraged to enroll in this service by July 13, 2025, using the instructions provided in their notification letter.
BCBSMT recommends that members regularly review their Explanation of Benefits (EOB) statements for any unfamiliar services. If you notice any discrepancies, you should contact BCBSMT using the number on your member ID card. Additionally, it is advisable to monitor your credit reports, place a fraud alert or security freeze if you are concerned about identity theft, and take advantage of the identity protection resources offered.
For more information, affected individuals can visit the BCBSMT data incident notice page or call the customer service number listed on their member ID card.
For more details about BCBSMT, visit the official Blue Cross and Blue Shield of Montana website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.