CHATTANOOGA, Tenn. – BlueCross BlueShield of Tennessee announced its vision care vendor EyeMed has been the victim of a cyberattack that resulted in a data breach, potentially impacting approximately 1,300 members.
On July 1, 2020, EyeMed learned an unauthorized individual accessed an EyeMed email box and sent phishing emails to addresses contained in the mailbox’s address book.
Promptly after discovering this incident, EyeMed blocked the unauthorized individual’s access and hired a cybersecurity firm to investigate. The accessed mailbox contained information about current and former recipients of vision benefits through EyeMed, including approximately 1,300 BlueCross members. The investigation revealed that the potentially accessed personal information included full name, address, date of birth, phone number, email address, vision insurance account/ID number, health insurance ID number, treatment information and Social Security Number.
To date, EyeMed is unaware of any misuse of the potentially accessed information. EyeMed has enhanced its protections by implementing additional security measures including augmented access controls to the EyeMed network and supplemental security awareness training for personnel.
BlueCross confirmed with EyeMed the identities of its affected members on or about November 9 and has mailed letters to individuals who were potentially impacted. The letter also provides sign-up information for free credit monitoring services offered by EyeMed for a duration of two years.
Members who would like more information may call the BlueCross Privacy Office at 1-888-455-3824 between 8:30 a.m. and 4:30 p.m. ET, Monday through Friday, or connect via email at Privacy_Office@BCBST.com.
About BlueCross®
BlueCross BlueShield of Tennessee is a taxpaying, not-for-profit health plan serving more than 3.4 million members in Tennessee and around the country. The Chattanooga-based company was founded in 1945 and is celebrating its 75th anniversary of bringing peace of mind to its members and local communities. BlueCross BlueShield of Tennessee Inc. is an independent licensee of the BlueCross BlueShield Association. For more information, visit the company’s news center at bcbstnews.com.