Class Action Filed as Montana Probes Blue Cross Blue Shield Data Breach
Plaintiffs allege delayed notification after a Conduent cyberattack that exposed sensitive data for up to 462,000 members.
Overview
- Western Justice Associates filed a federal class action in Montana against Health Care Service Corporation, alleging failure to safeguard BCBSMT members’ information and delayed notice.
- State Auditor James Brown has opened an investigation and says his office has not verified that affected customers have received notifications or credit monitoring.
- BCBSMT says the incident originated at third-party vendor Conduent and that the insurer’s own systems were not impacted.
- Conduent told the SEC a threat actor accessed part of its environment on January 13, 2025, and exfiltrated files containing personal information tied to some clients.
- Up to 462,000 Montanans may have had names, contact details, and medical and billing data exposed between November 8, 2024, and March 5, 2025, and the Auditor announced new cybersecurity and public-awareness efforts.