Carefirst Blue Cross Breach Hits 1.1M
Summary: CareFirst BlueCross BlueShield said it suffered a data breach affecting approximately 1.1 million customers, exposing names, birth dates, email addresses and insurance identification numbers, but not Social Security or credit card numbers, passwords or medical information. ThreatConnect found that the same bulk registrant in China that registered phony Premera and Anthem domains in April 2014 also registered two CareFirst look-alike domains, careflrst[dot]com and caref1rst[dot]com, using the same character-substitution technique.
What you should know: The Anthem and Premera intrusions tied to the same suspected state-sponsored actors collectively involved data on more than 90 million Americans, and the CareFirst domains were registered the same day as the EmpireBlue look-alike, suggesting the campaigns ran in parallel rather than in sequence.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026