Blue Shield of California, a nonprofit health insurance provider, faces a data breach in which over 4.7 million members' personal data was compromised.
The breach occurred due to a misconfiguration or insider threat, allowing the Google Ads platform unauthorized access to sensitive data.
While critical personal identifiable information was not compromised, the breach exposed insurance details, demographic data, and medical history of the affected individuals.
Blue Shield has urged members to remain vigilant against identity theft attempts, but has not offered identity theft protection services, drawing criticism from privacy advocates.