- State
- CA
- Covered entity type
- Business Associate
- Individuals affected
- 1,632
- Business associate present
- Yes
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Other
- First seen by InfoSec Signals
- Oct 21, 2026
- Last seen in OCR export
- Oct 25, 2026
OCR description
PIMS Transaction Number: 25-625191
Covered Entity: Blue Shield of California
The Covered Entity (CE), Blue Shield of California, reported that on April 4, 2025, its Electronic Health Record (EHR) team identified an erroneous data merge within the application used to support the Member Health Record (MHR) feature available through the member portal. As a result of this merge, certain members may have been able to access and affected the protected health information (PHI) of 1,632 individuals. The ePHI involved included demographic, financial, and treatment information. OCR provided the Covered Entity with technical assistance. In response to the incident and OCR’s investigation, the CE implemented additional technical safeguards to protect PHI.
Change history
- Oct 22, 2026Moved from current to archive, description updated
- Oct 21, 2026Added to OCR's under investigation list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.