CVS, the Blue Cross Blue Shield Federal Employee Program

cvsthebluecrossblueshield.com

CONFIRMED

Washington State Attorney General formal data breach disclosure notice filed by CVS, the Blue Cross Blue Shield Federal Employee Program affecting 4,479 residents.

Observable Status CONFIRMED

Industry / Sector Technology & Commercial

Incident Classification Network Intrusion & Data Exfiltration

Attributed Threat Actor Unattributed / Unknown

Affected Population 4,479 records

First Seen 2024-04-16

Last Updated 2024-04-16

Compromised Data Classes:

Authentication Credentials

Statutory Regulatory Filings:

Washington Attorney General: RCW 19.255 Data Breach Notice

OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

88% CONFIDENCE

1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%

2. Evidence Specificity +23% Statutory Filing Verified

3. Corroboration Curve +0% 1 independent domain

4. Timeline & Staleness +0% 1 milestone logged

Corroborated Source Domains:

agportal-s3bucket.s3.amazonaws.com

STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

1 Verified Statutory Filing

Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, FTC, FCC, EU/UK DPAs). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.

Washington Attorney General

RCW 19.255 Data Breach Notice

CONFIRMED BY REGULATOR

Docket / Accession ID Statutory Public Notice

Statutory Filing Date 2024-04-16

Disclosed Impact 4,479 records

Evidence Standard Regulatory Ground Truth

Statutory Filing Details & Summary (Preserved As Filed):

Official statutory data breach notification submitted by CVS, the Blue Cross Blue Shield Federal Employee Program to the Washington State Office of the Attorney General pursuant to RCW 19.255.010, disclosing unauthorized system access impacting 4,479 residents.

View Official Regulatory Filing Document https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM16689.pdf

Technical Forensic Briefing

Incident Overview

CVS, the Blue Cross Blue Shield Federal Employee Program, within its operating sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

Washington State Attorney General formal data breach disclosure notice filed by CVS, the Blue Cross Blue Shield Federal Employee Program affecting 4,479 residents.

Compromised Assets & Data Scope

Current disclosures quantify the affected population at approximately 4,479 records/individuals. Primary affected online infrastructure and perimeter domains include cvsthebluecrossblueshield.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Statutory Disclosures & Compliance

Washington Attorney General Filing: RCW 19.255 Data Breach Notice (2024-04-16) - Filing Link

Milestone Timeline (1 events logged)

2024-04-16 16:30 UTC

CONFIRMED BY REGULATOR

Washington State Attorney General Breach Notice (RCW 19.255)

Source: Washington State Attorney General Breach Notice (RCW 19.255)

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub