BreachCensus

Premera Blue Cross

United States of America

Premera Blue Cross is an organisation in Washington. It appears on the Washington State Attorney General breach-notification register, the Iowa Attorney General security breach notification list and the Wisconsin DATCP data breach list with 5 confirmed incidents; the most recent notice was filed on July 10, 2023.

Data as of September 6, 2026.

Confirmed incident

US-WA — Ransomware Attack

Occurred
May 31, 2023
Disclosed
July 10, 2023

Timeline

  1. July 10, 2023
    Reported to regulator Regulator

    WA AG breach notification: 33,237 Washington residents affected

    source
What a Washington notice means

Governed by RCW 19.255.010. Notice to the Attorney General is required when a breach affects more than 500 Washington residents.

Note: the count is Washington residents only, not a total.

Washington breach-notification register ↗

Confirmed incident

US-WA — Hacking/IT Incident

Occurred
January 28, 2023
Disclosed
March 5, 2023

Timeline

  1. March 5, 2023
    Reported to regulator Regulator

    WA AG breach notification: 36,211 Washington residents affected

    source
Confirmed incident

US-WA — Ransomware Attack

Occurred
April 27, 2022
Disclosed
July 18, 2022

Timeline

  1. July 18, 2022
    Reported to regulator Regulator

    WA AG breach notification: 1,303 Washington residents affected

    source
Confirmed incident

US-IA

Disclosed
August 11, 2020

Timeline

  1. August 11, 2020
    Reported to regulator Regulator

    IA AG breach notification: an unknown number of Iowa residents affected

    source
What a Iowa notice means

Governed by Iowa Code §715C.2. Notice to the Attorney General is required within five business days of notifying consumers, for a breach requiring notification to more than 500 Iowa residents.

Note: no affected-count is published on this register.

Iowa breach-notification register ↗

Confirmed incident

US-WI

Occurred
May 5, 2014
Disclosed
March 17, 2015

Timeline

  1. March 17, 2015
    Reported to regulator Regulator

    WI AG breach notification: an unknown number of Wisconsin residents affected

    source

Litigation

  • Possible litigation — multiple candidate dockets found, not yet resolved to a single case.
What a Wisconsin notice means

Governed by Wis. Stat. §134.98. No state agency must be notified. Affected individuals must be told within 45 days, and the national credit bureaus too when 1,000 or more people are notified; DATCP lists breaches reported to it or found to affect Wisconsin consumers.

Note: the count is Wisconsin residents only when published, not a total; many notices do not include one.

Wisconsin breach-notification register ↗