CareFirst BlueCross BlueShield of Maryland announced a cyberattack that compromised names, dates of birth, email addresses, and member ID numbers of over 1.1 million participants. The breach occurred in June 2014.
The attack was discovered after CareFirst engaged a cybersecurity firm to review its systems for vulnerabilities. They determined that the attackers gained access to a database that stores members’ online services information.
Participants were notified about the attack.