Excellus Blue Cross Blue Shield
Excellus Blue Cross Blue Shield is a nonprofit health insurance company serving members in Upstate New York under license from the Blue Cross Blue Shield Association.
Last updated August 31, 2026
Overview
Excellus Blue Cross Blue Shield is a nonprofit health insurance organization headquartered in Rochester, New York. It operates as an independent Blue Cross Blue Shield licensee, using the national association's trademarks and participating in the broader Blue Cross Blue Shield system while remaining a locally operated health plan. Its principal market is Upstate New York, where it has historically been described as the region's largest nonprofit health plan. The organization provides health coverage and related insurance services through the Blue Cross Blue Shield brands. Its regional identity developed through several local plan operations, including BlueCross BlueShield of Central New York, BlueCross BlueShield of the Rochester Area, and BlueCross BlueShield of Utica-Watertown. These local identities reflect the historical structure of Blue Cross and Blue Shield plans, which were established in different territories and later combined or coordinated under the national association's licensing framework. Excellus expanded its corporate presence in Western New York through its 2001 merger with Univera Healthcare, then known as North AmeriCare. Univera retained its own name and continued to operate separately from Excellus Blue Cross Blue Shield, so the transaction did not turn Univera into the Excellus consumer brand. The merger nevertheless connected Excellus with a broader regional health-insurance platform spanning communities in and around Buffalo as well as the company's established Upstate New York service areas. As a Blue Cross Blue Shield licensee, Excellus is distinct from the Blue Cross Blue Shield Association itself. The association coordinates trademark licensing, operating standards, communications, and nationwide interoperability among independent member companies. This structure allows a local plan such as Excellus to offer regionally focused coverage while members can receive services outside the home territory through the national BlueCard network and related claims arrangements. The available reference material does not establish a separate publicly traded parent, stock ticker, or controlling corporate owner for Excellus. The company's business is centered on health insurance rather than on a consumer packaged product. Its activities include the administration and financing of medical coverage, provider-network arrangements, and member services. Specific plan names, enrollment totals, current leadership, and detailed product-level financial information are not established by the supplied sources and are therefore not inferred here. Excellus became the subject of major public reporting after a 2015 cyberattack in which approximately 10.5 million records were reported as compromised. The incident placed the security of member and other personal information at the center of attention and reportedly cost the company $17.5 million. The supplied material does not provide a complete technical account of the intrusion, identify the perpetrators, or specify the full remediation program. It does, however, establish cybersecurity as an important event in the organization's modern history. Today, Excellus remains an active regional health-insurance brand associated with the Blue Cross Blue Shield system and focused on communities across Upstate New York. Its local-market role, nonprofit status, historic plan identities, and relationship with Univera distinguish it from national for-profit insurers and from the Blue Cross Blue Shield Association's federation-wide role.
History
Excellus Blue Cross Blue Shield belongs to the United States Blue Cross Blue Shield system, a federation of independent health insurers that operate in defined geographic territories under licenses from the Blue Cross Blue Shield Association. The national system developed from two historically separate forms of coverage: Blue Cross plans originally emphasized hospital services, while Blue Shield plans focused on physician services. Over time, the two brands became closely integrated, and the Blue Cross and Blue Shield Association was formed in 1982 through the merger of their national organizations. Within New York, Excellus developed as a regional nonprofit health-insurance organization serving communities outside the New York City metropolitan market. Its operating history is represented by several local Blue Cross Blue Shield identities, including plans associated with Central New York, the Rochester area, and the Utica-Watertown area. These identities reflect the territorial structure of the Blue Cross Blue Shield model, in which locally based companies provide coverage and manage provider relationships while using nationally recognized marks and participating in shared network arrangements. A significant corporate turning point came in 2001, when Excellus merged with Univera Healthcare, which had previously been known as North AmeriCare and was based in Buffalo. The supplied reference material states that Univera retained its name and remained separate from Excellus Blue Cross Blue Shield after the transaction. The relationship therefore expanded Excellus's regional corporate presence without eliminating the Univera identity or making the two brands interchangeable. The organization has been described as a nonprofit health plan and, in 2010, as the largest nonprofit health plan in Upstate New York. Its business consists of health-insurance coverage and associated administration rather than a single standardized product. The precise dates of the constituent local plans' creation, the current structure of their legal entities, membership figures, and current executive roster are not established in the supplied references. Excellus's most prominent documented modern event was a cyberattack in 2015. Approximately 10.5 million records were reported as hacked, making the incident material both for the company and for the wider debate over the security of health-insurance information. The reference material also reports that the attack cost Excellus $17.5 million. It does not provide sufficient detail to describe the attack's technical method, the complete chronology of discovery and notification, or the long-term effects on the company's systems and policies. Excellus operates within the broader Blue Cross Blue Shield infrastructure but is not the national association itself. The association manages licensing and common operating arrangements, while affiliated insurers independently serve their assigned territories. Through the BlueCard system, participating plans can provide members with access to providers and claims coordination beyond their home markets. This gives Excellus a regional operating base combined with access to a national network. The brand remains active and is associated with health coverage in Upstate New York. Its historical development is best understood as the growth and consolidation of local nonprofit Blue Cross Blue Shield operations, followed by a regional merger with Univera Healthcare and continued participation in the national Blue Cross Blue Shield federation.
- 2015Major cyberattack
A cyberattack reportedly compromised approximately 10.5 million records and generated reported costs of $17.5 million.
- 2010Recognized as a leading Upstate New York nonprofit health plan
Reference material described Excellus as the largest nonprofit health plan in Upstate New York.
- 2001Merger with Univera Healthcare
Excellus merged with Univera Healthcare, formerly North AmeriCare, a Buffalo-based health-care organization. Univera retained its name and continued as a separate organization.
Products and positioning
A locally operated, nonprofit regional health insurer combining Upstate New York market knowledge with the network reach and brand infrastructure of the Blue Cross Blue Shield system.
Excellus Blue Cross Blue Shield health plansHealth insurance
The company's core offering is regional health insurance for members in Upstate New York. The supplied references identify Excellus as a nonprofit health plan but do not provide a complete current catalog of individual, employer, Medicare, Medicaid, HMO, PPO, or other plan variants. Accordingly, this entry describes the principal insurance business without assigning unsupported plan names or specifications.
BlueCard network accessNational provider-network service
As a Blue Cross Blue Shield licensee, Excellus participates in the wider Blue Cross Blue Shield network and claims-coordination infrastructure. These arrangements can support member access to participating providers outside the plan's home territory, although the supplied material does not specify the precise terms available under each Excellus plan.
Flagship businesses
- Excellus Blue Cross Blue Shield regional health plans
- BlueCross BlueShield of Central New York
- BlueCross BlueShield of the Rochester Area
- BlueCross BlueShield of Utica-Watertown
Brand decisions
- 2001Merger with Univera HealthcareM&A
Excellus expanded its regional presence through a transaction involving Univera Healthcare, formerly North AmeriCare, which was based in Buffalo.
What changed. Excellus merged with Univera Healthcare while Univera retained its name and continued to operate separately.
Aftermath. The transaction linked the organizations within a broader regional health-insurance structure without replacing the Univera brand with Excellus.
Controversies
- 2015Excellus cyberattack and data breachControversy
Excellus was targeted in a cyberattack in which approximately 10.5 million records were reportedly compromised. The incident was associated with reported costs of $17.5 million and raised concerns about the protection of sensitive health-insurance information.
Sources
Cite this profile: Cite the canonical profile. /brand-wiki/excellus-blue-cross-blue-shield · Editorial policy · How profiles are compiled