Blue Cross Blue Shield of Minnesota disclosed a data breach on July 21, 2026, when it reported the incident to the U.S. Department of Health and Human Services. The health insurer is based in Eagan, Minnesota, and provides coverage across all 87 counties in the state.
The breach affected 3,640 individuals in the United States. The specific types of information exposed have not been publicly detailed beyond the fact that sensitive personally identifiable information or protected health information may have been compromised. The company commonly collects names, dates of birth, Social Security numbers, health insurance identification numbers, medical records, diagnoses, treatment histories, and billing information, but it is not confirmed that these specific data types were exposed in this incident.
Details can continue to emerge, and consumer notification letters regarding the breach may be delayed.