Current and former members who created accounts on www.carefirst.com prior to June 20, 2014 are affected by this incident. Members who enrolled to use CareFirst online services on or after June 20, 2014 are not affected because their enrollment occurred after the date of the unauthorized access.
If you believe you have been affected and have not yet received a letter from CareFirst, click here for information on enrolling in the protections being offered by CareFirst.