The email was sent from BCBSIL_noreply@bcbsil.com, but I don't know if that has been spoofed in some way.
I wasn't able to find any recent data breaches, but does anyone else have any info? BCBS doesn't seem to make it easy to report phishing emails, so I have to call them.