Was I affected by a Maximus, Inc. data breach?

If you received healthcare services from Maximus, Inc., you may have been affected by one of their 2 reported breaches. Check your mail for breach notification letters, review your medical records for unauthorized changes, and use our breach checker tool to search for specific incidents.

Was my data affected by the Maximus, Inc. breach?

If you were a patient of Maximus, Inc. during the breach period, your data may have been compromised. Check your mail for breach notification letters. You can also contact Maximus, Inc. directly or file a records request to verify what data was accessed.

What data was exposed in the Maximus, Inc. breach?

Healthcare data breaches can expose names, dates of birth, Social Security numbers, medical records, insurance information, and financial data. The specific data types vary by incident. Review the breach notification from Maximus, Inc. for details on what was compromised.

Can I sue Maximus, Inc. for a data breach?

Whether you can bring or join a claim depends on the incident, governing law, documented harm, filing deadlines, and any court-approved settlement terms. Review current court materials and consult a licensed healthcare data breach attorney for advice about your circumstances.

Request Records

Loading...

Maximus, Inc. Data Breach History

Maximus, Inc. has been involved in 2 reported healthcare data breaches affecting 2.8M patients.

How many data breaches has Maximus, Inc. had?

Maximus, Inc. has been involved in 2 reported healthcare data breaches affecting a total of 2.8M patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Unauthorized Access/Disclosure, Hacking/IT Incident. If you received care from Maximus, Inc., review the timeline below to check if your data may have been compromised.

VirginiaUnauthorized Access/DisclosureHacking/IT Incident

2

Total Breaches

2.8M

Patients Affected

2023

First Breach

2025

Most Recent

Breach Timeline

2025

Maximus, Inc.

2025-04-25 · Virginia

medium

5K affectedUnauthorized Access/DisclosureNetwork Server

Protected health information (PHI) potentially exposed likely includes: names, dates of birth, Social Security numbers, medical record numbers, health insurance information, insurance policy numbers, clinical diagnoses and treatment information, medication records, laboratory and imaging results, healthcare provider names and contact information, billing and claims information, and other sensitive health data stored on or accessible through the compromised network server. The specific data elements exposed depend on what information was stored on the affected server and what access the unauthorized party obtained.

2023

Maximus, Inc.

2023-08-04 · Virginia

critical

2.8M affectedHacking/IT IncidentNetwork Server

While the specific data elements are not detailed in the breach submission, individuals affected by a Maximus network server breach likely had the following types of protected health information and personally identifiable information exposed: ### Personal Information Involved - Full names - Social Security numbers - Dates of birth - Home addresses and contact information - Telephone numbers and email addresses - Health insurance information and policy numbers - Medicare and Medicaid identification numbers - Financial account information (banking details, payment information) - Healthcare provider information and treatment history - Diagnosis codes and clinical information - Prescription medication records - Claims history and healthcare utilization data - Employer information - Emergency contact information - Citizenship and immigration status information (for government program beneficiaries) The exact combination of exposed data elements likely varies depending on which Maximus systems were compromised and which covered entities' data was stored on the affected servers.

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.

Related resources

Maximus, Inc. Data Breach History

Maximus, Inc. has been involved in 2 reported healthcare data breaches affecting 2.8M patients.

How many data breaches has Maximus, Inc. had?

Maximus, Inc. has been involved in 2 reported healthcare data breaches affecting a total of 2.8M patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Unauthorized Access/Disclosure, Hacking/IT Incident. If you received care from Maximus, Inc., review the timeline below to check if your data may have been compromised.

VirginiaUnauthorized Access/DisclosureHacking/IT Incident

2

Total Breaches

2.8M

Patients Affected

2023

First Breach

2025

Most Recent

Breach Timeline

2025

Maximus, Inc.

2025-04-25 · Virginia

medium

5K affectedUnauthorized Access/DisclosureNetwork Server

Protected health information (PHI) potentially exposed likely includes: names, dates of birth, Social Security numbers, medical record numbers, health insurance information, insurance policy numbers, clinical diagnoses and treatment information, medication records, laboratory and imaging results, healthcare provider names and contact information, billing and claims information, and other sensitive health data stored on or accessible through the compromised network server. The specific data elements exposed depend on what information was stored on the affected server and what access the unauthorized party obtained.

2023

Maximus, Inc.

2023-08-04 · Virginia

critical

2.8M affectedHacking/IT IncidentNetwork Server

While the specific data elements are not detailed in the breach submission, individuals affected by a Maximus network server breach likely had the following types of protected health information and personally identifiable information exposed: ### Personal Information Involved - Full names - Social Security numbers - Dates of birth - Home addresses and contact information - Telephone numbers and email addresses - Health insurance information and policy numbers - Medicare and Medicaid identification numbers - Financial account information (banking details, payment information) - Healthcare provider information and treatment history - Diagnosis codes and clinical information - Prescription medication records - Claims history and healthcare utilization data - Employer information - Emergency contact information - Citizenship and immigration status information (for government program beneficiaries) The exact combination of exposed data elements likely varies depending on which Maximus systems were compromised and which covered entities' data was stored on the affected servers.

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.