Blue Shield shared the private health data of millions with Google for years
a year ago
- #privacy
- #healthcare
- #data-breach
- Blue Shield of California notified millions of a data breach involving Google.
- Patient data, including health and personal info, was shared from 2021 to January 2024.
- Misconfigured Google Analytics collected search terms, insurance details, and personal info.
- Google may have used the data for targeted ad campaigns.
- Breach affects 4.7 million individuals, most of Blue Shield's customer base.
- Unclear if Google deleted the data or complied with requests.
- Blue Shield is among several healthcare firms caught by tracking tech breaches.
- Kaiser, Cerebral, Monument, and Tempest also faced similar breaches.
- This is the largest healthcare data breach of 2025 so far.