Data Breach Details
admitted to sharing sensitive health information of up to 4.7 million members with 's platforms due to a misconfiguration of between April 2021 and January 2024.
The exposed data included insurance plan details, addresses, gender, family size, and details related to the "Find a Doctor" tool, potentially used by Google for targeted ads.
Response and Implications
Blue Shield terminated its relationship with Google Analytics and Ads in January 2024 and has begun notifying affected members, urging them to monitor their accounts for suspicious activity.
The breach raises concerns over the use of online tracking technologies by healthcare companies, with Blue Shield not offering identity theft protection services or detailing whether Google will delete the shared data.