Blue Shield of California and Google Data Breach Investigation

According to an April 9, 2025 report submitted by Blue Shield of California to the California Attorney General, between April 21, 2021 and January 2024, a Google Analytics configuration allowed insureds’ protected health information (“PHI”) to be shared with Google Ads. The PHI may have included patient name, insurance plan name, type and group number, city, ZIP code, gender, family size, Blue Shield-assigned identifiers for members’ online accounts, medical claim service date, service provider and patient financial responsibility. Using the PHI, Google may have placed targeted advertising on Blue Shield of California’s insureds. If you or someone you know receives a notification letter about the data breach and would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.