On February 11, 2025, Blue Shield discovered that, between April 2021 and January 2024, Google Analytics was configured in a way that allowed certain member data to be shared with Google’s advertising product, Google Ads, that likely included protected health information. Google may have used this data to conduct focused ad campaigns back to those individual members.

Blue Shield severed the connection between Google Analytics and Google Ads on its websites in January 2024.

What information was involved

  • Insurance plan name, type and group number;
  • city;
  • zip code;
  • gender;
  • family size;
  • Blue Shield assigned identifiers for members’ online accounts;
  • medical claim service date and service provider, patient name, and patient financial responsibility;
  • “Find a Doctor” search criteria and results (location, plan name and type, provider name and type).
  • Phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    20
    arrow-down
    1
    ·
    4 hours ago

    Jail those involved.

    I’m serious, jail them. This is again corpos making millions from us plebs and then they’ll get a fine that is a fraction of what they made and since they don’t pay taxes anyway, it’s still nothing.

    Jail them

    Find out who was in charge and either that person can show evidence that it was someone else without their knowledge or YOU JAIL THEM. Both at Google and at that torture company blue shield

    Jail them! Jail them now. Jail them for years, at least.