Unauthorized access leads to data breach in Arkansas Blue Cross Blue Shield rewards program

Arkansas Blue Cross Blue Shield has reported a significant data breach affecting some of its customers’ personal information following unauthorized access to its rewards program. According to a statement released Tuesday, the breach occurred when an unknown individual accessed the system hosted by Healthmine, a Dallas-based company that manages the Blue Wellness Rewards program.

The incident, discovered on August 26, 2024, involved the illegal redemption of digital gift cards, compromising sensitive member data. The exposed information includes names, addresses, email addresses, dates of birth, and prescription histories. However, the insurer assured that no social security numbers or financial details were compromised in the breach.

Upon detection, Healthmine promptly suspended affected rewards accounts and took immediate action to block associated internet domains. Additional security measures have since been implemented to prevent further unauthorized access.

In response to the breach, Arkansas Blue Cross Blue Shield has engaged a forensic firm to assist in the investigation and has notified law enforcement agencies. The insurer is also offering impacted members a complimentary one-year membership with Experian’s IdentityWorks service. This service includes credit monitoring, identity restoration, and up to $1 million in identity theft insurance.

Max Greenwood, Vice President of Government and Media Affairs at Arkansas Blue Cross and Blue Shield expressed regret over the incident and emphasized the seriousness with which they are addressing the issue. "While the motive behind the breach appears to have been aimed at obtaining gift cards rather than identity theft, we urge affected members to take advantage of the services provided through Experian," Greenwood stated in the release.

Affected individuals will receive notification letters detailing the breach and instructions on how to safeguard their personal information. For further assistance, Arkansas Blue Cross Blue Shield has established a dedicated customer service line available Monday through Friday from 8 a.m. to 5 p.m. (CST).