Member News: Magellan Health Data Security Information
Blue Cross Blue Shield of Arizona was notified on June 4, 2020 that Magellan Health, a company that previously administered our behavioral health benefits through Arizona Biodyne, was the target of a ransomware attack which may involve information for some members and former members of BCBSAZ’s plans. Magellan Health has not been a vendor since 2016. Magellan Health has no evidence that any information was accessed, acquired, or misused. Magellan’s security incident did not impact Blue Cross Blue Shield of Arizona systems, which are monitored to keep our customers’ data secure and help prevent cyber-incidents.
The incident is still under investigation. What we know today:
On April 11, 2020, Magellan discovered it was targeted by a ransomware attack. The unauthorized actor gained access to Magellan’s systems after sending a phishing email on April 6 that impersonated a Magellan client.
- After learning of this, Magellan immediately reported the incident to the FBI and is working with them during the investigation.
- The data may include member name, address, email address, date of birth, Social Security number, health-related information, treatment information, member ID number, group number, and subscriber number.
Affected Blue Cross Blue Shield of Arizona members have received details of the incident from Magellan, including information about the two years of complimentary credit monitoring and fraud protection services available. As a precaution, Magellan has secured the services of ID Experts® to offer a free two-year membership to ID Experts MyIDCareTM.
To learn more about this incident and steps you can take, call Magellan at 1-888-451-6558.
Blue Cross Blue Shield of Arizona will continue to make the security of our members’ information a top priority.
Fraud Prevention Tips
We encourage everyone to guard against identity theft and fraud. There are several no-cost actions people can take.
- DO remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring free credit reports.
- DO add a fraud alert to your credit report file to help protect your credit information by calling just one of the three nationwide credit bureaus:
- DO report suspected incidents of identity theft to local law enforcement, the Federal Trade Commission, or your state attorney general.
- To learn more go to the FTC’s Web site at www.consumer.gov/idtheft, call the FTC at (877) IDTHEFT (438-4338) or write to Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580.
- DO obtain additional information from the FTC and the nationwide credit bureaus about fraud alerts and security freezes.
For the latest, visit or call Magellan Health at 1-888-451-6558.