Data Breach Investigation involving Cierant Corporation and Cleo Communications

Blue Cross Blue Shield of Massachusetts (“BCBS of MA)” is a client of Cierant Corporation. Cierant utilizes a Cleo Communications file transfer system (“FTS”) to share information between BCBS of MA and Cierant. On December 10, 2024, an unauthorized character used a vulnerability in the Cleo FTS platform to gain access to BCBS of MA insureds’ protected health information (“PHI”). The PHI included members’ names, addresses, dates of birth, treatment-related dates, a generic description of services received, provider name, medical record number, health plan beneficiary number, claims number, and/or plan member account number, and premium information. The December 10, 2024 breach was discovered in early February 2025; however, Cierant did not begin sending notification letters to affected individuals until July 3, 2025. If you or someone you know receives a notification letter about the data breach and would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.