Arkansas Blue Cross and Blue Shield reports third party data breach
Learn More
Arkansas Blue Cross and Blue Shield (ABCBS) is reporting a data breach involving their vendor, Healthmine. Arkansas Blue Cross and Blue Shield is a healthcare insurance provider serving individuals and families in Arkansas.
On August 26, 2024, an unauthorized individual accessed Healthmine's system, which hosts the member portal for the Blue Wellness Rewards program. ABCBS contacted law enforcement and engaged a forensic firm to investigate. Healthmine disabled the affected Rewards accounts and blocked certain internet domains believed to have been used in the attack.
The attacker illegally redeemed digital gift cards and accessed personal information, including:
- members' names,
- addresses,
- email addresses,
- dates of birth,
- prescription histories.
The number of affected individuals and the nature of the attack is not disclosed.
ABCBS claims that Social Security numbers and financial information were not compromised.
Affected members will receive a letter detailing the incident and offering a one-year membership with Experian's IdentityWorks credit monitoring program. While the primary goal of the attacker appeared to be obtaining gift cards rather than identity theft, members are encouraged to remain vigilant and utilize the offered credit monitoring services.
