Personal Data Breached for Nearly 1 Million Medicare Enrollees

Protected health information for nearly 1 million Medicare beneficiaries may have been compromised by a 2023 “security vulnerability” in software used by a Medicare contractor in Wisconsin, the Biden administration reported Friday.

The Centers for Medicare & Medicaid Services and the Wisconsin Physicians Service Insurance Corp. (WPS), a CMS contractor that handles Medicare hospital and outpatient claims, are mailing written notifications to 946,801 Medicare beneficiaries whose information may have been exposed.

The actions follow the July 8, 2024, discovery of a “security vulnerability in the MOVEit software, a third-party application developed by Progress Software and used by WPS for the ...