Blue Shield of California Data Breach Affects 4.7 Million: Update

On April 1, 2021, Blue Shield of California experienced a data breach that impacted approximately 4.7 million individuals across the United States, including 75,498 people in Texas.

On Feb. 11, 2025, Blue Shield discovered that Google Analytics on some of its websites had been set up in a way that shared member data with Google Ads between April 2021 and January 2024.

That data may have included insurance plan names, types and group numbers, ZIP codes, online account IDs, medical claim dates and providers, patient names, patient costs and "Find a Doctor" searches.

Blue Shield later disclosed a second breach. On May 22, 2025, it learned that a broker with Harmon Insurance Services had passed and that her husband had accessed her online client list. He then asked a friend who is a broker to help her clients.

A former employee of the broker may also have accessed the client list and applications between March 25 and May 22, 2025. The data potentially compromised included names, member ID numbers, Social Security numbers, dates of birth, addresses, phone numbers, group ID numbers and Medicare numbers.

Blue Shield reported the second breach to the California Attorney General on July 21, 2025.

Blue Shield of California's response to the breach

Blue Shield offered people affected by the broker incident one year of free credit monitoring through Experian IdentityWorks. The enrollment deadline was Jan. 31, 2026.

Individuals who have questions about the Google Analytics breach can call 833-918-5064, Monday through Friday from 6 a.m. to 6 p.m. Pacific time, and give engagement number B142309.