Health Management Systems of America

Health Management Systems, Inc. (HMS) notified Massachusetts residents of a data breach occurring on April 21, 2026. An employee uploaded a photo of their workstation to Facebook, exposing personal information including names, addresses, Social Security Numbers, and claim numbers. HMS investigated, had the post removed, and offered 24 months of identity theft protection via IDX. The incident involved Medicaid benefits administration data.

Health Management Systems of America (HMSA) reported a data breach to the Vermont Attorney General involving one Vermont resident. On December 9, 2024, HMSA detected unauthorized access to a single email account caused by a spear phishing campaign. The attacker accessed protected health information and Social Security numbers. HMSA secured the account, reset passwords, and engaged forensic investigators. Notification was sent to the affected individual in February 2026, offering 12 months of credit monitoring via Kroll.

Health Management Systems of America reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-11 and was reported on 2026-02-09. 3 Indiana residents were affected. 4,265 individuals affected in total.

Health Management Systems of America (Michigan) reported to HHS OCR on 2025-10-27 a Hacking/IT Incident affecting 4,213 individuals. Breached information was located in Email. No business associate was present. No further detail is available in the public HHS disclosure.