Excellus BlueCross BlueShield

Excellus BlueCross BlueShield operates as a health insurance provider that offers a range of medical, dental, vision, pharmacy and supplemental plans to individuals, families and employer groups. It functions as an independent licensee of the Blue Cross and Blue Shield Association, delivering coverage primarily within its service area in upstate New York. The organization administers both commercial health products and government‑sponsored programs such as Medicare Advantage and Medicaid, aiming to facilitate access to care for its members. In addition to insurance underwriting, Excellus provides care management services, wellness programs and digital tools designed to support preventive health and chronic disease management. Its product portfolio is structured to meet the needs of diverse populations, from active workers to retirees and low‑income beneficiaries.

Excellus BlueCross BlueShield is headquartered in the United States, with its main operations located in Rochester, New York. The organization experienced a significant cybersecurity incident on December 23, 2013, when unauthorized actors accessed and exfiltrated personal and financial information of approximately 10.5 million individuals, including current members, former patients and others who had interacted with its healthcare network. This breach exposed names, birth dates, Social Security numbers, contact details, member identifiers, insurance claims and financial account records, remaining undetected for an extended period before discovery. The incident prompted a coordinated response involving federal law enforcement agencies and external cybersecurity firms, and affected individuals were offered identity protection services. As a not‑for‑profit health plan, Excellus operates without private shareholders and reinvests any surplus into member services and community health initiatives. Its status as an independent licensee of the Blue Cross and Blue Shield Association allows it to leverage the national brand while maintaining local governance and decision‑making authority.