Keeping your personal information safe is one of our top priorities.
On September 9, 2015, Excellus BlueCross BlueShield, a health plan in Upstate New York, announced that it was the victim of a sophisticated cyberattack. Excellus has informed us that the attackers have gained access to the information of a small number of Premera members during the attack.
How was the information accessed?
Excellus continues to work with law enforcement on the cyberattack, so it has not announced the specific details about how access was gained. Excellus has assured us that they have taken, and will continue to take, measures to enhance its systems to help prevent another incident.
What information was accessed?
The potential information accessed may include one or more of these items:
- name
- date of birth
- postal addresses
- phone number
- Social Security Number
- subscriber identification number
- member identification number
- claims information
Excellus has indicated that its investigation has not determined that any such data was removed from their system, and it has no evidence to date that such data has been used inappropriately.
Why does Excellus have the information of some Premera Members?
Premera is part of the Blue Cross and Blue Shield Association (BCBSA). This allows our members to access care across the country from providers contracted with other Blue Cross and Blue Shield Plans. If you receive care outside of Washington and Alaska, another Blue plan will help to process your claim. Excellus is the Blue plan in Upstate New York.
If you received healthcare services in Upstate New York, your healthcare provider may have shared your information with Excellus so they could help us to process your claim. Premera and Excellus have separate systems and no Premera systems were impacted as a result of this attack.
What should you do next?
If you believe you have been affected by the Excellus cyberattack or need more information:
- Excellus is offering free credit monitoring services to affected members.
- Monitor your Explanation of Benefits (EOB) statements for any suspicious claims activity.
- Contact Premera if you have questions or concerns about your EOB at the number listed.
What are we doing about this attack?
We're committed to keeping your personal information secure. We're sorry for any difficulty or concern that this attack may cause you. We're working with Excellus and the BCBSA to understand how member information was accessed. Excellus has employed a leading security specialist and is working closely with the FBI to investigate this attack. Premera systems were not affected in the Excellus incident.
Feel free to contact us if you have questions or want more information:
- If you have questions, call Premera Customer Service toll free at 1-855-869-6777, from 8 a.m. to 6 p.m. Pacific time Monday-Friday.
Frequently Asked Questions
Q. Has Premera suffered another cyberattack?
No. The recently announced cyberattack on Excellus is not directly related to Premera.
Q. How can I get more information on the Excellus cyberattack?
Excellus has published a web site at www.excellusfacts.com.
Q. I'm not a member of Excellus. Why do they have my data?
Premera is part of the national network of the Blue Cross and Blue Shield Association. Being part of that network allows our members to access care across the country. If you receive care outside of Premera's home states of Washington and Alaska, the local Blue plan for that state may be involved in processing your claim. If you've received healthcare services in Upstate New York, your healthcare provider may have shared your information with Excellus to allow them to process your claim.
Q. Will some Premera members receive letters from Excellus?
Yes. Some members of Premera have been affected by the Excellus cyberattack. If you received healthcare services in Upstate New York in the past, your data may have been accessed. Excellus is mailing notification letters to all individuals affected in their cyberattack.
Q. What types of information was obtained during the Excellus cyberattack?
Accessed data potentially includes but is not limited to names, member ID numbers, dates of birth, Social Security numbers, addresses, telephone numbers, email addresses, etc.
Q. I have already signed up through Experian for credit monitoring services. Do I need to sign up through the services offered by Excellus?
Excellus is providing credit monitoring services to those affected by their cyberattack. They are using Kroll, a different provider than Experian, the company contracted by Premera. It's your decision whether you want to sign up for additional credit monitoring services.
Q. Can you tell me if I have been specifically affected by the Excellus cyberattack?
Excellus has started mailing letters to affected individuals. We are working closely with them to identify which of our members have been affected, but are unable at this point to provide specific names.