Maximus, Inc.

The Iowa Attorney General reported on June 23, 2021, that Maximus, Inc. experienced a data breach involving unauthorized access to a server containing personal information of individuals associated with the Ohio Department of Medicaid (ODM). The breach occurred between May 17 and 19, 2021, affecting 1,589 Iowa residents, with a total of 334,690 individuals potentially impacted. The compromised information included names, dates of birth, Social Security numbers, and DEA numbers.

Source: https://www.iowaattorneygeneral.gov/for-consumers/security-breach-notifications/2021-security-breach-notifications/

TPRM report: https://www.rankiteo.com/company/maximus

"id": "max048072425",
"linkid": "maximus",
"type": "Breach",
"date": "5/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 334690,
                        'industry': 'Healthcare',
                        'name': 'Maximus, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 334690,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'dates of birth',
                                              'Social Security numbers',
                                              'DEA numbers']},
 'date_detected': '2021-05-17',
 'date_publicly_disclosed': '2021-06-23',
 'description': 'Unauthorized access to a server containing personal '
                'information of individuals associated with the Ohio '
                'Department of Medicaid (ODM).',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'Social Security numbers',
                                 'DEA numbers']},
 'references': [{'date_accessed': '2021-06-23',
                 'source': 'Iowa Attorney General'}],
 'title': 'Maximus, Inc. Data Breach',
 'type': 'Data Breach'}