The Anthem data breach affected a significant number of users, exposing personal information that can be used for identity theft, phishing, and fraud. If you've ever had an account or relationship with Anthem, it's worth checking whether your data was involved.
What Happened
Anthem, one of the largest US health insurers, disclosed a massive data breach in February 2015 after discovering unauthorized access to a database containing current and former member and employee records. The breach affected approximately 78.8 million people and was later attributed by US authorities to state-sponsored hackers.
What Data Was Exposed
The exposed data included names, dates of birth, Social Security numbers, member ID numbers, addresses, phone numbers, email addresses, and employment and income information. Medical and claims data were reportedly not part of the stolen database, though the personal data exposed was still extensive.
Why This Still Matters
Even breaches from years ago remain a risk today. Stolen data is sold, traded, and reused indefinitely. Credentials from old breaches fuel credential stuffing attacks — automated attempts to reuse your email and password combination on other sites. If you reused a password anywhere, one old breach can compromise several current accounts.
How to Check If You Were Affected
Use our free breach checker below — enter your email and we'll scan it against known breach databases instantly, no signup required.
What to Do If You Were Affected
- Change any reused password immediately, starting with your most sensitive accounts.
- Enable two-factor authentication wherever it's offered.
- Monitor financial accounts closely if payment or banking data was involved.
- Watch for phishing — breach data is often used to craft convincing scam messages.
- Freeze your credit if your SSN or government ID number was exposed.
👉 Check your own exposure in 30 seconds → scan your email free.
Frequently Asked Questions
When did the Anthem data breach happen?
Attackers had access to Anthem's systems from around December 2014, and the breach was discovered and disclosed by Anthem on 4 February 2015, affecting 78.8 million current and former members and employees.
What data was stolen in the Anthem breach?
Names, dates of birth, Social Security numbers, member ID numbers, addresses, phone numbers, email addresses, and employment/income information were exposed. Medical treatment and claims details were reportedly not included.
Who was responsible for the Anthem breach?
US federal prosecutors attributed the attack to hackers linked to the Chinese government as part of a broader campaign targeting US companies and government agencies for espionage purposes.
How do I check if I was affected by the Anthem breach?
Anthem notified all affected current and former members directly and offered free credit monitoring and identity protection. You can also check your email at Scan My Shadow, and monitor your credit given the SSN exposure.
What was the settlement for the Anthem breach?
Anthem reached a $115 million class-action settlement in 2017 — the largest data breach settlement in US history at the time — to fund credit monitoring and reimburse affected individuals for breach-related expenses.