On May 30, 2019, Premera Blue Cross agreed to pay $32 million to resolve a healthcare data breach lawsuit filed in the U.S. District Court for the District of Oregon, and pledged $42 million to bolster the insurer’s information security program over the next 3 years.
The class action lawsuit began in March 2015, after defendants alleged Premera was negligent in a May 2014 cyberattack which resulted in the theft of 10.6 million individuals’ personal and protected health information.