Was I affected by a Centers for Medicare & Medicaid Services data breach?

If you received healthcare services from Centers for Medicare & Medicaid Services, you may have been affected by one of their 2 reported breaches. Check your mail for breach notification letters, review your medical records for unauthorized changes, and use our breach checker tool to search for specific incidents.

Was my data affected by the Centers for Medicare & Medicaid Services breach?

If you were a patient of Centers for Medicare & Medicaid Services during the breach period, your data may have been compromised. Check your mail for breach notification letters. You can also contact Centers for Medicare & Medicaid Services directly or file a records request to verify what data was accessed.

What data was exposed in the Centers for Medicare & Medicaid Services breach?

Healthcare data breaches can expose names, dates of birth, Social Security numbers, medical records, insurance information, and financial data. The specific data types vary by incident. Review the breach notification from Centers for Medicare & Medicaid Services for details on what was compromised.

Can I sue Centers for Medicare & Medicaid Services for a data breach?

Whether you can bring or join a claim depends on the incident, governing law, documented harm, filing deadlines, and any court-approved settlement terms. Review current court materials and consult a licensed healthcare data breach attorney for advice about your circumstances.

Request Records

Loading...

Centers for Medicare & Medicaid Services Data Breach History

Centers for Medicare & Medicaid Services has been involved in 2 reported healthcare data breaches affecting 2.4M patients.

How many data breaches has Centers for Medicare & Medicaid Services had?

Centers for Medicare & Medicaid Services has been involved in 2 reported healthcare data breaches affecting a total of 2.4M patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Hacking/IT Incident. If you received care from Centers for Medicare & Medicaid Services, review the timeline below to check if your data may have been compromised.

MarylandHacking/IT Incident

2

Total Breaches

2.4M

Patients Affected

2023

First Breach

2025

Most Recent

Breach Timeline

2025

Centers for Medicare & Medicaid Services

2025-06-30 · Maryland

critical

107K affectedHacking/IT IncidentNetwork Server

Based on CMS's role and typical network server breaches, the following protected health information and personal identifiers may have been exposed: ### Personal Identifiers - Social Security numbers - Names and addresses - Date of birth - Contact information (phone numbers, email addresses) - Medicare beneficiary identification numbers - Medicaid identification numbers ### Healthcare Information - Medical claims and billing records - Diagnosis codes and medical conditions - Prescription medication information - Healthcare provider information and visit history - Insurance coverage details and eligibility status - Prior authorization records ### Financial Information - Bank account information used for direct deposit of benefits - Payment and claims payment history - Deductible and out-of-pocket cost information ### Administrative Data - Enrollment and disenrollment records - Beneficiary status information - Plan selection and coverage history - Correspondence and communication records

2023

Centers for Medicare & Medicaid Services

2023-07-28 · Maryland

critical

2.3M affectedHacking/IT IncidentNetwork Server

- Social Security numbers - Medicare beneficiary identification numbers - Medicaid identification numbers - Names and addresses - Dates of birth - Health insurance claim information - Medical diagnosis and treatment codes (ICD codes) - Prescription medication information - Healthcare provider identification and credentials - Banking and financial account information - Direct deposit account details - Employment information - Contact telephone numbers and email addresses - Potentially complete electronic health records for affected beneficiaries

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.

Related resources

Centers for Medicare & Medicaid Services Data Breach History

Centers for Medicare & Medicaid Services has been involved in 2 reported healthcare data breaches affecting 2.4M patients.

How many data breaches has Centers for Medicare & Medicaid Services had?

Centers for Medicare & Medicaid Services has been involved in 2 reported healthcare data breaches affecting a total of 2.4M patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Hacking/IT Incident. If you received care from Centers for Medicare & Medicaid Services, review the timeline below to check if your data may have been compromised.

MarylandHacking/IT Incident

2

Total Breaches

2.4M

Patients Affected

2023

First Breach

2025

Most Recent

Breach Timeline

2025

Centers for Medicare & Medicaid Services

2025-06-30 · Maryland

critical

107K affectedHacking/IT IncidentNetwork Server

Based on CMS's role and typical network server breaches, the following protected health information and personal identifiers may have been exposed: ### Personal Identifiers - Social Security numbers - Names and addresses - Date of birth - Contact information (phone numbers, email addresses) - Medicare beneficiary identification numbers - Medicaid identification numbers ### Healthcare Information - Medical claims and billing records - Diagnosis codes and medical conditions - Prescription medication information - Healthcare provider information and visit history - Insurance coverage details and eligibility status - Prior authorization records ### Financial Information - Bank account information used for direct deposit of benefits - Payment and claims payment history - Deductible and out-of-pocket cost information ### Administrative Data - Enrollment and disenrollment records - Beneficiary status information - Plan selection and coverage history - Correspondence and communication records

2023

Centers for Medicare & Medicaid Services

2023-07-28 · Maryland

critical

2.3M affectedHacking/IT IncidentNetwork Server

- Social Security numbers - Medicare beneficiary identification numbers - Medicaid identification numbers - Names and addresses - Dates of birth - Health insurance claim information - Medical diagnosis and treatment codes (ICD codes) - Prescription medication information - Healthcare provider identification and credentials - Banking and financial account information - Direct deposit account details - Employment information - Contact telephone numbers and email addresses - Potentially complete electronic health records for affected beneficiaries

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.