Health Management Systems, Inc. (HMS) notified Massachusetts residents of a data breach occurring on April 21, 2026. An employee uploaded a photo of their workstation to Facebook, exposing personal information including names, addresses, Social Security Numbers, and claim numbers. HMS investigated, had the post removed, and offered 24 months of identity theft protection via IDX. The incident involved Medicaid benefits administration data.