Health insurer Anthem said Tuesday that the recent major cyberattack on its systems may have affected 8.8 million to 18.8 million non-Anthem customers -- people who are or were insured by other Blue Cross Blue Shield providers.
Anthem works with a network of other independent Blue Cross and Blue Shield (BCBS) insurers -- like Empire, Independence and Blue Care of Michigan, for example -- a system through which BCBS customers may receive care when they're in an area of the country where BCBS is operated by another company in the network.
So if a person insured by a different BCBS company received care from Anthem, their records may have been compromised in the attack, Anthem said.
Anthem disclosed the breach earlier this month, saying the attack could have affected as many as 80 million records. On Tuesday the insurer said in a statement to press that it estimates about 60 million to 70 million of those consumers are current or former Anthem customers.
Anthem said previously the data potentially affected includes customers' personal information -- like names, medical ID numbers, birthdates and Social Security Numbers -- but no credit card information. The company will mail notifications to affected customers "in the coming weeks," Anthem said Tuesday.
- Stolen Identity: 2.3 Million Americans Suffer Medical ID Theft
- Anthem Warns Customers About 'Phishing' Email Scam
- Millions of Children Exposed to ID Theft Through Anthem Breach