Blueberry Medical (“Blueberry”) Security Incident
Blueberry Medical (“Blueberry”) Security Incident
On August 10, an unauthorized actor exploited a critical vulnerability in the Metabase platform to obtain administrator access to Blueberry’s Metabase environment. The activity was associated with broader exploitation of the Metabase vulnerability. On August 22, Blueberry detected the unauthorized access and initiated its incident-response process. Within approximately one hour of detection, Blueberry terminated the unauthorized access and associated sessions and preserved relevant logs and system evidence. To prevent future occurrences and in light of the Metabase incident, Blueberry Medical has strengthened its authentication, implemented an additional monitoring and escalation process for its vendors’ critical vulnerabilities, and increased the frequency of security reviews for third-party and self-hosted technology infrastructure, such as Metabase. Blueberry also confirmed that Metabase was running a non-vulnerable version by then. Blueberry also reached out to law enforcement and retained a leading forensic and cyber security response firm.
Information that may have been exposed in this incident includes: name, health plan name and policy number, date of birth, and health care information such as medical records, dates of service, medical codes, and charges for services. Although this incident did not involve certain sensitive financial information that would increase the risk of identity theft, we are providing the following information to you out of an abundance of caution. We recommend that you remain vigilant by reviewing account statements and monitoring free credit reports. You should promptly report any suspicious activity or suspected identity theft to the proper law enforcement authorities, including local law enforcement, your state’s attorney general, and/or the Federal Trade Commission (“FTC”).
If you have any questions regarding this matter, please call us at 888-752-8498 Monday through Friday, 9:00 AM to 9:00 PM, Eastern Time or email us at privacy@blueberrymed.com
View source version on businesswire.com: https://www.businesswire.com/news/home/20261009748496/en/
The articles, information, and content displayed on this webpage may include materials prepared and provided by third parties. Such third-party content is offered for informational purposes only and is not endorsed, reviewed, or verified by Morningstar.
Morningstar makes no representations or warranties regarding the accuracy, completeness, timeliness, or reliability of any third-party content displayed on this site. The views and opinions expressed in third-party content are those of the respective authors and do not necessarily reflect the views of Morningstar, its affiliates, or employees.
Morningstar is not responsible for any errors, omissions, or delays in this content, nor for any actions taken in reliance thereon. Users are advised to exercise their own judgment and seek independent financial advice before making any decisions based on such content. The third-party providers of this content are not affiliated with Morningstar, and their inclusion on this site does not imply any form of partnership, agency, or endorsement.
Popular
3 Stocks to Sell and 3 Stocks to Buy for October
The Thrilling 37
Undervalued by 15%, This Utilities Stock Could Be an Unexpected AI Winner
The 10 Best Companies to Invest in Now
United States