We are awaiting information to hear if NYC employees are affected. We will update this information as soon as it is released to us.

Cyber attackers executed a very sophisticated attack to gain unauthorized access to Anthem's parent company's IT system and have obtained personal information relating to consumers and Empire BlueCross BlueShield employees who are currently covered or who have received coverage in the past. The information accessed includes names, birthdays, Social Security numbers, street addresses, email addresses and employment information, including income data. No credit card information was compromised, nor is there evidence at this time that medical information such as claims, test results, or diagnostic codes were targeted or obtained.

As soon as Anthem learned about the attack, it immediately made every effort to close the security vulnerability, contacted the FBI and began fully cooperating with their investigation. Their parent company has also retained Mandiant, one of the world’s leading cyber security firms, to evaluate their systems and identify solutions based on the evolving landscape.

Empire will individually notify current and former members whose information has been accessed.  Credit monitoring and identity protection services will be provided free of charge so that those who have been affected can have peace of mind. 

The company has established a dedicated website where members can access information, including frequent questions and answers.  

There is also a dedicated toll-free number that both current and former members can call if they have questions related to this incident: 877-263-7995. 

Anthem takes consumers’ privacy very seriously and  are doing everything in their power to make their systems and security processes — and most importantly your data — more secure. In the meantime, as we learn more, we will continue to provide updates.

New York residents who may have been impacted by the cyber attack against Anthem, should be aware of scam email campaigns targeting current and former Empire BlueCross BlueShield and Empire BlueCross members. These scams, designed to capture personal information (known as “phishing”) are designed to appear as if they are from Anthem, (Empire’s parent company), and the emails include a “click here” link for credit monitoring. These emails are NOT from Anthem or Empire. 

• DO NOT click on any links in email.
• DO NOT reply to the email or reach out to the senders in any way.
• DO NOT supply any information on the website that may open, if you have clicked on a link in email.
• DO NOT open any attachments that arrive with email.

Empire also is not calling members regarding the cyber attack and is not asking for credit card information or social security numbers over the phone.

This outreach is from scam artists who are trying to trick consumers into sharing personal data. There is no indication that the scam email campaigns are being conducted by those that committed the cyber attack, or that the information accessed in the attack is being used by the scammers. 

Empire will contact current and former members via mail delivered by the U.S. Postal Service about the cyber attack with specific information on how to enroll in credit monitoring. Affected members will receive free credit monitoring and ID protection services. 

For more guidance on recognizing scam email, please visit the FTC Website: http://www.consumer.ftc.gov/articles/0003-phishing. Additional information about the cyber attack against Anthem is available at www.AnthemFacts.com.