Certain Arkansas Blue Cross members may have been affected by a vendor breach involving Healthmine

Healthmine, a vendor that hosts a rewards portal for Arkansas Blue Cross and Blue Shield members, has recently investigated unauthorized access to rewards accounts for certain members. An unknown bad actor accessed accounts in the Blue Wellness Rewards program to attest to health actions and redeem digital gift cards. No Social Security numbers or financial information was involved.

Healthmine has disabled members’ Rewards accounts and blocked internet domains believed to have been used by the bad actor. Arkansas Blue Cross is working with Healthmine to ensure additional security measures are implemented in their system, such as multi-factor authentication for registration and revised procedures to redeem rewards and change member information.

While it appears that the bad actor was focused on stealing Rewards gift cards rather than identity theft, Arkansas Blue Cross is offering affected members the opportunity to enroll, free of charge, in a complimentary one-year membership with Experian’s® IdentityWorksSM program. If you receive a letter indicating you have been affected, you will be provided with detailed information on next steps for protecting your identity and you always can learn more by calling the customer service number on the back of your member ID card.