In a recent notification, BlueCross BlueShield of Tennessee (BCBST) alerted around 2,000 current and former members of possible data breaches that may have compromised their member portal accounts. While BCBST serves over 3.4 million members, the company emphasized that the majority remain unaffected.
The group at risk includes individuals covered by BCBST through employment or those who purchased plans independently, along with participants in various programs including BlueCare Tennessee and Medicare Advantage. BCBST is proactively reaching out to these potentially impacted members via letter and is providing resources aimed at safeguarding their personal information.
"We are committed to protecting our members' information and have taken immediate steps to address these incidents," said a BCBST spokesperson.
"We are committed to protecting our members' information and have taken immediate steps to address these incidents,"
To assist those at risk, BCBST is offering complimentary identity monitoring services to individuals who receive the notification letter. In light of the challenges posed by identity theft and fraud, the company urges affected members to remain vigilant. They recommend reviewing account statements and taking advantage of the free annual credit report accessible at www.annualcreditreport.com or by calling (877) 322-8228.
Security monitoring tools at BCBST detected suspicious login attempts on December 19, 2023, indicating potential unauthorized access attempts using stolen username and password combinations. "While we found no evidence that these credentials were sourced from BCBST's systems, we acted swiftly to protect our members by disabling access to the online member portal," said a BCBST security official.
"While we found no evidence that these credentials were sourced from BCBST's systems, we acted swiftly to protect our members by disabling access to the online member portal,"
By the Numbers
Following this event, the investigation revealed a similar breach dating back to August 17, 2023. The nature of the personal information at risk varies for each individual. It could encompass records such as names, dates of birth, addresses, and medical information—potentially even financial details for a minority of affected members.
Impact and Legacy
BCBST reassured its members regarding the management of their data. "For less than 1% of those impacted, financial information linked to their account might have been included in the data breach," said the representative. For former members whose coverage ended over two years ago, only their user ID and password are believed to be at risk.
"For less than 1% of those impacted, financial information linked to their account might have been included in the data breach,"
To further enhance security, BCBST is advising all members to change their online passwords upon logging in. They are also instituting new login requirements. “We cannot stress enough the importance of creating unique passwords that are not reused across multiple accounts,” the spokesperson added.
Members are encouraged to audit their benefits documents from BCBST or BlueCare to confirm the accuracy of the health services listed and to promptly report any suspicious activity to the company.
For those with questions or needing more information about these incidents, BCBST has made resources available through their support line at 1-888-455-3824, operational Monday through Friday during business hours. Members can also reach out via email at Privacy_Office@BCBST.com.
In light of these events, BCBST is taking a proactive stance to ensure the safety and security of its members. This commitment reflects the company's core mission to provide healthcare solutions while safeguarding member information against evolving cyber threats. As the landscape of cybersecurity continues to change, BCBST emphasizes that vigilance and immediate documentation reviews are key to preventing identity theft and protecting personal information.
About BlueCross
Founded in 1945, BlueCross BlueShield of Tennessee is a not-for-profit health plan that provides services to over 3.4 million members in Tennessee and beyond. As an independent licensee of the BlueCross BlueShield Association, the company has continuously worked to secure the trust and peace of mind of its members for over 75 years.
