Blue Shield’s Google Analytics Error Exposes 4.7 Million Health Records

Blue Shield of California disclosed a data exposure affecting approximately 4.7 million individuals caused by a misconfigured Google Analytics setup that inadvertently sent protected health information (names, plan details, service dates, provider info, geographic data, account identifiers and search queries) to Google Ads from April 2021 to January 2024; the insurer disconnected the tool and notified affected members, and while no malicious access has been identified the incident underscores risks of third-party analytics misconfigurations in healthcare.