Changeflow GovPing Insurance Blue Cross Blue Shield of Montana Data Breach E...
Routine Notice Added Final

Blue Cross Blue Shield of Montana Data Breach Exposes 462,000 Residents

Favicon for csimt.gov MT Insurance News
Published
Detected
Email

Summary

Blue Cross Blue Shield of Montana disclosed a data breach affecting 462,000 residents after unauthorized access between November 8, 2024, and March 5, 2025. The breach exposed names, addresses, billing information, and medical data. Montana State Auditor and Commissioner of Securities and Insurance James Brown announced a full-scale investigation into the incident and whether notification requirements were followed.

What changed

Blue Cross Blue Shield of Montana reported a data breach exposing personal and medical information of 462,000 Montana residents over a four-month period. The breach, discovered between November 8, 2024, and March 5, 2025, included names, addresses, billing data, and medical records. Montana State Auditor James Brown characterized the incident as deeply disturbing and announced a full-scale investigation to determine whether required breach notification and response procedures were followed.

Affected BCBSMT members should monitor their Explanation of Benefits statements for unauthorized claims or services, report any suspicious activity immediately to both BCBSMT and the Montana Commissioner of Securities and Insurance, and remain vigilant for potential identity theft or medical fraud. Healthcare providers and insurers in Montana should note this enforcement action as a reminder to review their own data security and breach notification procedures.

What to do next

  1. Review Explanation of Benefits statements for unauthorized activity
  2. Report suspicious activity to BCBSMT and Montana CSI immediately
  3. Visit csimt.gov for updates on the investigation

Archived snapshot

Apr 12, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Nick Northern | Newsbreak

October 23, 2025

Massive Data Breach Exposes Personal Information Of Montanans

Potentially half of all Montana residents are at risk after a data breach exposed their names, addresses, billing, and medical data.

That’s according to Blue Cross Blue Shield of Montana, which is now under investigation from a third party named Lynch Carpenter.

Montana Officials Call Breach “Deeply Disturbing”

The data breach wasn’t just a short one-time thing; this was months of information being leaked and possibly stolen, as the data breach took place between November 8, 2024, and March 5, 2025.

Montana State Auditor and Commissioner of Securities and Insurance James Brown was quoted as saying this breach was “not just a technical lapse” but framed it as a “deeply disturbing incident with far-reaching and jaw-dropping consequences for our citizens.”

Worse still, Blue Cross Blue Shield had promised to contact affected customers and offer credit monitoring; however, Commissioner Brown said he was unaware that this was happening.Canva

What Montana Residents Should Do Now?

All told there are 462,000 Montana residents who are members of Blue Cross Blue Shield of Montana (BCBSMT), and Commissioner Brown said he’s looking out for them, stating on X, formerly known as Twitter.

Montana is my home—and protecting our people is my job. We’ve launched a full-scale investigation into the Blue Cross Blue Shield data breach held by a 3rd party contractor to get answers and if the law was not followed to deliver accountability.
If you feel you’ve had your information compromised, make sure to look over your “Explanation of Benefits” statements and report suspicious activity immediately. You can also visit the Montana Commissioner of Securities and Insurance website here.

Sources: Lynch Carpenter, NBC Montana, KTVH, Newsweek

Click HERE to read the full article

Was this helpful?

👍 Yes 👎 No Please give us your feedback!

Please let us know how we could improve this article.

Submit

Get daily alerts for MT Insurance News

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from MT CSI.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
MT CSI
Published
October 23rd, 2025
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Healthcare providers Insurers Patients
Industry sector
5242 Health Insurance
Activity scope
Data breach response Patient notification Regulatory investigation
Geographic scope
US-MT US-MT

Taxonomy

Primary area
Data Privacy
Operational domain
IT Security
Compliance frameworks
GLBA
Topics
Healthcare Cybersecurity

Get alerts for this source

We'll email you when MT Insurance News publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!