Centers for Medicare & Medicaid Services (CMS)

In a security incident revealed by CMS and their contractor WPS, personally identifiable information (PII) of Medicare beneficiaries and others may have been compromised due to a vulnerability exploited in the MOVEit software. Information related to the management of Medicare claims and CMS healthcare provider audits was potentially accessed without authorization. This incident, affecting 946,801 individuals, was discovered to have occurred between May 27 and May 31, 2023, leading to a large-scale notification effort.

Source: https://www.hcinnovationgroup.com/cybersecurity/data-breaches/news/55138546/cms-notifies-people-potentially-impacted-by-data-breach

"id": "cen001032425",
"linkid": "centers-for-medicare-&-medicaid-services",
"type": "Vulnerability",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"