{"id":11598,"date":"2018-09-03T20:07:00","date_gmt":"2018-09-03T20:07:00","guid":{"rendered":"http:\/\/7377fb32-b9f1-473c-b74a-ddabe4b1d5dd"},"modified":"2018-09-03T20:07:00","modified_gmt":"2018-09-03T20:07:00","slug":"premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/","title":{"rendered":"Premera Blue Cross accused of destroying evidence in data breach lawsuit"},"content":{"rendered":"<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet4.cbsistatic.com\/hub\/i\/r\/2015\/03\/17\/d0f226a0-2dd5-4d45-9c27-92032c3cda7c\/resize\/770xauto\/b51feb9b73afb2e164fa28caaae76e65\/premera-hero.jpg\" class=\"\" alt=\"\" height=\"auto\" width=\"770\"\/><\/span><span class=\"credit\">Premera Bue Cross<\/span><\/p>\n<p>The plaintiffs of a class-action lawsuit against health insurance provider Premera Blue Cross are accusing the organization of &#8220;willfully destroying&#8221; evidence that was crucial for establishing accurate details in a security breach incident.<\/p>\n<p>In court documents filed last week obtained by ZDNet, plaintiffs claim that Premera intentionally destroyed a computer that was in a key position to reveal more details about the breach, but also software logs from a security product that may have shown evidence of data exfiltration.<\/p>\n<p>Establishing if hackers stole data from Premera&#8217;s systems is crucial for the legal case. Breach victims part of the class-action will be to claim a right for monetary compensation, while Premera may argue that since hackers did not steal data from its servers, there is no tangible harm to victims.<\/p>\n<p><a href=\"https:\/\/hub.zdnet.com\/article\/pageup-says-it-is-probable-customer-data-was-externally-accessed\/\">PageUp says it is &#8216;probable&#8217; customer data was externally accessed<\/a> <strong>|<\/strong> <a href=\"https:\/\/www.zdnet.com\/article\/medical-records-of-high-school-students-leaked-in-appealing-data-breach\/\" target=\"_blank\">Medical records of high school students leaked in &#8216;appalling&#8217; data breach<\/a><\/p>\n<p>The class-action lawsuit is in connection to a March 2015 announcement. Back then, Premera announced that <a href=\"https:\/\/www.zdnet.com\/article\/premera-blue-cross-hit-by-sophisticated-cyberattack-11m-affected\/\" target=\"_blank\">hackers breached its systems<\/a> and gained access to computers holding the personal and medical data of over 11 million Americans.<\/p>\n<p>Several lawsuits were set in motion <a href=\"https:\/\/www.seattletimes.com\/seattle-news\/premera-negligent-in-data-breach-5-lawsuits-claim\/\" target=\"_blank\" rel=\"noopener noreferrer\">in 2015<\/a>, later followed by a class-action filing. Angry Premera customers cited negligence on Premera&#8217;s part. The plaintiffs claimed that the Office of Personnel Management (OPM) &#8220;found numerous security flaws during a routine audit of Premera&#8217;s systems, which it reported to Premera a few weeks before the breach.&#8221;<\/p>\n<p>The OPM warning came in April 2014. A month later a Premera employee fell victim to a phishing email, which led to hackers planting malware on the organization&#8217;s network.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_ZD_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>Premera took months to heed the OPM&#8217;s warning, hiring cyber-security firm Mandiant in October 2014. The cyber-security firm discovered the breach a few months later, in January 2015.<\/p>\n<p>&#8220;Mandiant&#8217;s investigation determined that a known hacking group (that had targeted and extracted data from similar entities) was responsible for the breach, and discovered fragments of RAR files, which are created by compression software commonly used by hackers to shrink files to a manageable size before exfiltration,&#8221; court documents filed on August 3, 2018 reveal.<\/p>\n<p>Part of their litigation, the plaintiffs requested access to evidence regarding the 2015 security breach, including Mandiant reports, and the hard drives and forensic images of the 35 Premera computers that Mandiant identified as infected.<\/p>\n<p><a href=\"https:\/\/www.zdnet.com\/article\/security-lapse-exposes-198-million-united-states-voter-records\/\" target=\"_blank\">198 million Americans hit by &#8216;largest ever&#8217; voter records leak<\/a> | <a href=\"https:\/\/www.zdnet.com\/article\/us-voter-data-exposed-by-robocall-firm\/\" target=\"_blank\">Thousands of US voters&#8217; data exposed by robocall firm<\/a><\/p>\n<p>But in new documents filed last week, plaintiffs say that &#8220;Premera responded that it could only produce images for 34 of those 35 computers; the 35th computer had been destroyed.&#8221;<\/p>\n<p>&#8220;The 35th computer, called A23567-D, was a &#8216;developer&#8217; computer&#8211;loaded with robust software and afforded security clearance to Premera&#8217;s most sensitive databases,&#8221; court documents say.<\/p>\n<p>&#8220;Mandiant found that A23567-D contained a unique piece of hacker-created malware that Mandiant called PHOTO. Mandiant found PHOTO only on A23567-D. PHOTO malware had the capability to upload and download files, and to exfiltrate data. Hackers accessed PHOTO on A23567-D between May 12, 2014 and February 2015.<\/p>\n<p>&#8220;The hackers configured PHOTO on A23567-D to communicate with an outside website named &#8216;www[.]presecoust[.]com.&#8217; Mandiant&#8217;s analysis of proxy logs found hundreds of thousands of almost daily contacts between A23567-D, the only Premera computer containing PHOTO, and <a href=\"http:\/\/www.presecoust.com\" target=\"_blank\" rel=\"noopener noreferrer\">www.presecoust.com<\/a> between July 23, 2014 and January 9, 2015. Only A23567-D&#8217;s destroyed hard drive could show what the hackers left behind during those contacts.&#8221;<\/p>\n<p>The suspicion is that these hard drives contained RAR files used for data exfiltration, along with other evidence.<\/p>\n<p><strong>CNET: <a href=\"https:\/\/www.cnet.com\/news\/equifaxs-data-breach-by-the-numbers-the-full-breakdown\/\" target=\"_blank\" rel=\"noopener noreferrer\">Equifax&#8217;s data breach by the numbers: The full breakdown<\/a><\/strong><\/p>\n<p>According to a response the plaintiffs&#8217; legal team received from Premera, 34 of the 35 computers Mandiant marked as infected were sent to sequestration, but A23567-D was categorized as an End-of-Life asset, and Premera&#8217;s IT team had it destroyed on December 16, 2016.<\/p>\n<p>&#8220;The destroyed computer was perfectly positioned to be the one-and-only staging computer hackers needed to create vast staging files for the purpose of shipping even more data outside of Premera&#8217;s network,&#8221; the plaintiffs argue. &#8220;This computer functioned as the development machine for a software programmer, and as such was pre-loaded with a vast array of legitimate utilities that could be turned to any purpose.&#8221;<\/p>\n<p>&#8220;While Mandiant had a chance to analyze its contents and draw conclusions from that data, Plaintiffs will not be able to do so, and have been deprived of the ability to review and rebut Mandiant&#8217;s conclusions based on that data.&#8221;<\/p>\n<p>Plaintiffs have an interest in rebutting Mandiant&#8217;s analysis because they say several Mandiant reports had conflicting conclusions &#8211;with February and March 2015 reports suggesting that hackers exfiltrated data, while a June 2015 report denied the claims of previous reports, saying no evidence of data exfiltration was found.<\/p>\n<p><strong>TechRepublic: <a href=\"https:\/\/www.techrepublic.com\/article\/a-data-breach-may-be-more-expensive-than-you-think-thanks-to-these-hidden-costs\/\" target=\"_blank\" rel=\"noopener noreferrer\">A data breach may be more expensive than you think, thanks to these hidden costs<\/a><\/strong><\/p>\n<p>But that&#8217;s not all. Further, the plaintiffs also argue that Premera did not take steps to secure crucial logs created by a data loss prevention (DLP) software called Bluecoat.<\/p>\n<p>&#8220;Premera destroyed both of these pieces of evidence after the filing of this lawsuit,&#8221; plaintiffs said.<\/p>\n<p>The plaintiffs&#8217; legal team is now asking the judge overseeing the case to instruct the jury &#8220;to presume that exfiltration occurred,&#8221; and to deny Premera the chance to bring in any security expert to testify that no data exfiltration took place.<\/p>\n<p>If the judge rules favorably on this motion, Premera will not be able to claim that plaintiffs didn&#8217;t suffer damages because hackers never actually stole anything from its servers. But a favorable ruling won&#8217;t be enough for plaintiffs to win their case, either, as they&#8217;ll still need to prove that customers suffered direct damages because of the 2015 breach. In the last few years, breached companies have won most of these cases because victims found it very hard, or near impossible, to link financial losses from identity theft or identity fraud to a specific breach, in particular. It certainly doesn&#8217;t help that customers have had their personal data leak online left and right, for the past decade.<\/p>\n<p>Answering a request for comment from ZDNet sent earlier today, Premera Blue Cross VP Corporate Communications Steve Kipp provided the following statement:<\/p>\n<p>&#8220;<em>We are aware of the motion for sanctions that was recently filed by the plaintiffs in the class action arising from the 2015 cyberattack at Premera. It is the type of motion that is not uncommon in complex litigation involving voluminous physical and documentary evidence, and represents just one of many disputes that can arise during the discovery phase of a lawsuit. We disagree with the motion and do not believe the facts justify the relief plaintiffs have requested. Our attorneys will be filing a response in due course.<\/em>&#8220;<\/p>\n<p>This is not the first time an organization is accused of destroying crucial evidence in a legal case. The Associated Press found last year that Georgia election officials quietly <a href=\"https:\/\/apnews.com\/877ee1015f1c43f1965f63538b035d3f\/APNewsBreak:-Georgia-election-server-wiped-after-suit-filed\" target=\"_blank\" rel=\"noopener noreferrer\">wiped clean a computer server<\/a> that could have revealed whether Georgia&#8217;s recent elections were compromised by hackers.<\/p>\n<p><em>Article updated post-publication with Premera&#8217;s statement.<\/em><\/p>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Class-action lawsuit plaintiffs claim US health insurer Premera Blue Cross intentionally destroyed evidence despite ongoing litigation.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":11599,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-11598","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Premera Blue Cross accused of destroying evidence in data breach lawsuit 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Premera Blue Cross accused of destroying evidence in data breach lawsuit 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-09-03T20:07:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"521\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Premera Blue Cross accused of destroying evidence in data breach lawsuit\",\"datePublished\":\"2018-09-03T20:07:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/\"},\"wordCount\":1193,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/\",\"name\":\"Premera Blue Cross accused of destroying evidence in data breach lawsuit 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg\",\"datePublished\":\"2018-09-03T20:07:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg\",\"width\":770,\"height\":521},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Premera Blue Cross accused of destroying evidence in data breach lawsuit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Premera Blue Cross accused of destroying evidence in data breach lawsuit 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/","og_locale":"en_US","og_type":"article","og_title":"Premera Blue Cross accused of destroying evidence in data breach lawsuit 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-09-03T20:07:00+00:00","og_image":[{"width":770,"height":521,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Premera Blue Cross accused of destroying evidence in data breach lawsuit","datePublished":"2018-09-03T20:07:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/"},"wordCount":1193,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/","url":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/","name":"Premera Blue Cross accused of destroying evidence in data breach lawsuit 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg","datePublished":"2018-09-03T20:07:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit.jpg","width":770,"height":521},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/premera-blue-cross-accused-of-destroying-evidence-in-data-breach-lawsuit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Premera Blue Cross accused of destroying evidence in data breach lawsuit"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/11598","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=11598"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/11598\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/11599"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=11598"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=11598"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=11598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}