> We understand receiving a notice such as this can create concern, and we regret that member personal information may have been shared without authorization.

> We understand receiving a notice such as this can create concern, and we regret that member personal information may have been shared without authorization. Vague passive voice, FTW. One way to start to fix the pattern and practice of gross negligence in our field is for Blue Shield CA to get stuck with HIPAA violation fines for each record leaked. If Blue Shield CA claims they're not competent to know which records were leaked, assume it's all of the records.