Blue Shield gave my contact info and possibly medical info to another firm, Altais, run by Brown & Toland, to “proactively assist my healthcare” for them to schedule an "annual wellness exam." Never heard of them/wouldn't accept a provider chosen by insurance anyway.
Pretty sure this is a violation of California CPRA (they had full name, phone number, and DOB at a minimum) and possibly a HIPAA violation as well (I couldn't get either to indicate what data they had).
What do you think?