Archive — US — techcrunch
Blue Shield of California shared the private health data of millions with Googlefor years
Blue Shield of California notified 4.7 million individuals about a data breach where it shared sensitive health information with Google from 2021 until January 2024 due to a misconfiguration in Google Analytics. The breach included personal details, and the extent is significant as it potentially affects most of its 4.5 million members.
Key points
- Blue Shield of California shared private health data with Google due to a misconfiguration.
- Data sharing began in 2021 and stopped in January 2024.
- 4.7 million individuals are being notified about the breach.
- The data included personal and sensitive health information, insurance plan details, and financial responsibilities.
- This incident represents a significant breach in healthcare data privacy, being the largest in 2025 so far.
Why it matters
- This breach is part of a growing trend where healthcare organizations risk patient privacy by using online tracking technologies.
- Historically, similar incidents have occurred with other major healthcare providers sharing patient data with advertising firms.
- The increase in data-sharing incidents raises concerns about patient trust and compliance with privacy regulations in the evolving digital landscape.
The Blue Shield of California data breach highlights major privacy concerns in healthcare, reflecting a need for stricter control over data sharing practices amidst evolving digital tracking technologies.