Updated CareFirst BlueCross BlueShield Statement Regarding Excellus Cyberattack

Baltimore, MD (October 06, 2015) - In September, 2015 CareFirst was made aware by Excellus (like CareFirst, a Blue Cross Blue Shield company) of a cyberattack on Excellus’ information technology system and a resulting data breach. While CareFirst systems were not affected CareFirst works with Excellus to administer claims for CareFirst members receiving health care services in the geographic areas Excellus serves.

Working in consultation with Excellus, CareFirst has determined that approximately 13,000 current and past CareFirst members are affected by this attack. Excellus will be communicating via letter to affected members in the coming weeks. Additional information about the cyberattack and Excellus’ response may be found at Excellus BCBS Facts.