Centers for Medicare & Medicaid Services
ent_4009b693faf82811020688d2
Disclosures
4
HHS OCR · 1 jurisdiction
Incidents
—
no linked incident in sample
Max affected reported
3,112,815
nationwide · HHS OCR MD
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Centers for Medicare & Medicaid Services
- Normalized
- centers for medicare medicaid— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- cms.gov
Disclosure history (4)newest first
- MARYLANDHHS OCRas victim2025-06-30
Centers for Medicare & Medicaid Services reported to HHS on 2025-06-30 a Hacking/IT Incident affecting 107154 individuals. Breached information located on Network Server.
- MARYLANDHHS OCRas victim2024-09-06
Centers for Medicare & Medicaid Services reported to HHS on 2024-09-06 a Hacking/IT Incident affecting 3,112,815 individuals. Breached information located on Network Server. A business associate's software application exposed PHI including names, DOBs, SSNs, and claims data. The CE and BA implemented additional administrative and technical safeguards.
- MARYLANDHHS OCRas victim2023-07-28
Centers for Medicare & Medicaid Services reported to HHS on 2023-07-28 a Hacking/IT Incident affecting 2,342,357 individuals. Breached information located on Network Server. A business associate's software application exposed PHI including names, DOBs, SSNs, and diagnoses. The CE provided credit monitoring and the BA implemented security safeguards.
- MARYLANDHHS OCRas victim2023-04-07
Centers for Medicare & Medicaid Services (MD) reported to HHS on 2023-04-07 an Unauthorized Access/Disclosure affecting 10,011 individuals. A business associate employee inadvertently mailed PHI — including names, addresses, claims information, diagnoses, and other treatment information — to the wrong recipients via paper/films. The BA implemented additional administrative and technical safeguards in response. Affected individuals, the media, and HHS were notified; substitute notice was provided.