MAXIMUS, Inc.
bd_a97dcc2bf2d44500 · schema v1 · pii pii-v2
Full breach record for MAXIMUS, Inc. →7 incidents on fileMAXIMUS, INC. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-499). The register records the breach as discovered on May 27, 2023. Additional entities named: MOVEIT. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
Jan 1, 2023
Filed
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- California State AGbd_bf25ea19ea12a1242023-08-18 · +229dVerified
- Indiana State AGbd_45d3fdf48f1c933d2023-08-24 · +235dVerified by operator
- Vermont State AGbd_67d6131ab83daa012023-08-25 · +236dVerified by operator
- Delaware State AGbd_97027e573fc51e132023-08-25 · +236dVerified by operator
Show 6 more filings ↓Show fewer ↑up to 374d gap
- Washington State AGbd_d4deac1eb085d27a2023-08-25 · +236dVerified
- New Hampshire State AGbd_fe9387821fda92642023-08-25 · +236dVerified by operator
- Hawaii State AGbd_d3d3db6e2dd7a7a82023-08-26 · +237dVerified by operator
- Oregon State AGbd_4a2584ab84dfe0f12023-08-29 · +240dVerified by operator
- South Carolina State AGbd_a90da3e7c4e0509c2023-08-29 · +240dVerified
- Idaho State AGbd_5312733f463970a32024-01-10 · +374dVerified by operator
Showing first 10 of 16 linked disclosures.
Filing propagation · 11 filings · 11 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Jan 10 (ID) — a 374-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Cascade drawn from the first 10 linked disclosures of 16 — the full spread may be wider.
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.