Blue Shield of California Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Blue Shield of California data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Blue Shield of California
Blue Shield of California is a nonprofit mutual benefit corporation and health plan provider that was founded in 1939. Originally established by the California Medical Association, the company is headquartered in Oakland, California, and serves over 4.5 million members statewide. Blue Shield offers a wide range of health insurance products, including HMO, PPO, dental, vision, Medicaid, and Medicare healthcare plans.
The company collaborates with more than 65,000 physicians and approximately 340 hospitals across California. Blue Shield of California is also known for its community-focused initiatives and has contributed significantly through its independent Blue Shield of California Foundation, addressing issues such as health equity and domestic violence prevention.
What was the April 2021–January 2024 Data Breach?
On February 11, 2025, Blue Shield of California discovered a significant data breach that occurred between April 2021 and January 2024. The breach involved the improper sharing of protected health information (PHI) through the company's use of Google Analytics, a third-party vendor service.
Blue Shield had used Google Analytics to track member interactions on certain websites to improve service quality. However, the analytics tool was incorrectly configured, causing sensitive member data to be shared with Google's advertising platform, Google Ads. Google may have used this data to conduct targeted advertising campaigns directed at affected members.
Information exposed:
- Insurance plan name, type, and group number
- City and zip code
- Gender
- Family size
- Blue Shield-assigned identifiers for members' online accounts
- Medical claim service dates and service providers
- Patient names and patient financial responsibility details
- "Find a Doctor" search criteria and results (including location, plan name and type, provider name and type)
According to a disclosure to the Texas Attorney General, 75,498 residents of Texas have been affected.
Your Rights and Next Steps
If you received notification of this breach or suspect you may have been affected, it's important to take steps to protect yourself:
- Review your account statements: Regularly monitor your financial and healthcare accounts for any suspicious activity or unauthorized charges.
- Obtain your credit reports: You can request a free copy of your credit report from each of the three major credit reporting agencies once every 12 months.
- Place a fraud alert: Consider placing a fraud alert on your credit report by contacting one of the three major credit bureaus.
- Report identity theft or fraud: If you notice suspicious activity, report it immediately to local law enforcement, your state's Attorney General, or the Federal Trade Commission (FTC).
- Stay informed: Keep track of any updates provided by Blue Shield of California and other relevant authorities regarding this breach.
You May Be Entitled to Compensation
If your information was exposed in the Blue Shield of California data breach, you may be eligible for financial compensation. Lawyers are ready to help you understand your rights and guide you through the process of joining a class action lawsuit.
To find out if you qualify, complete the form below. Act now to protect your rights and hold Blue Shield accountable for the unauthorized disclosure of your sensitive personal information.