Blue Shield Data Breach: Google Analytics Misconfiguration Exposed Member Data

Blue Shield of California announced a potential data breach affecting some members' protected health information. Between April 2021 and January 2024, a misconfiguration of Google Analytics allowed certain member data, including plan details, location, and demographics, to be shared with Google Ads for targeted advertising. Social Security numbers and financial information were not compromised. Blue Shield severed the connection in January 2024 and is taking steps to prevent future incidents. Members are advised to monitor their accounts and credit reports for suspicious activity.