Maxim Healthcare Group, including Maxim Healthcare Services and Maxim Healthcare Staffing (collectively “Maxim Healthcare”) became aware of a data breach incident after it suffered unusual activity related to several employees’ email accounts.
The personal information that was accessed by an unauthorized actor included name, address, date of birth, contact information, medical history, medical condition or treatment information, medical record number, diagnosis code, patient account number, Medicare/Medicaid number, and username/password.
Maxim Healthcare took additional security protocols, including the implementation of Multi-Factor Authentication for all email accounts, and transitioned to a new Security Operations Center with advanced detection and response capabilities.
"id": "MAX22181222",
"linkid": "maxim-healthcare",
"type": "Data Leak",
"date": "11/2021",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"