California also experienced the largest single incident included in the analysis. From April 2021 to January 2024, member data from Blue Shield of California was shared with Google for advertising purposes, affecting an estimated 4.7 million individuals. While the company stated that no malicious actors were involved, the data shared included information such as plan type, location, gender, and family size.
