The MOVEit Transfer file transfer platform, created by Progress Software Corporation, was the subject of a recent, major hacking effort by the Cl0p ransomware group, according to alarming information disclosed by cybersecurity firm Emsisoft. The analysts estimate that 60,144,069 people and about 1,000 organisations were affected by the attacks. The Cl0p group's leak site, state breach reports, SEC filings, and other public disclosures are the sources of the data. The attacks affected tens of millions of people, according to the experts. Maximus, Pôle emploi, Louisiana Office of Motor Vehicles, Colorado Department of Health Care Policy and Financing, Oregon Department of Transportation, Teachers Insurance and Annuity Association of America, Genworth, PH Tech, and Milliman Solutions are the organisations with the greatest number of affected persons.

The Indiana Office of the Attorney General reported that Maximus, Inc experienced a data breach on May 27, 2023, affecting 40,470 residents. The total number of individuals affected is unknown. This incident highlights a significant compromise of personal information, potentially including sensitive data such as names, addresses, Social Security numbers, and other identifying information. The breach could lead to identity theft, financial fraud, and other malicious activities, impacting the privacy and security of the affected individuals. The exact nature and extent of the data compromised have not been fully disclosed, but the incident underscores the need for robust cybersecurity measures to protect sensitive information.

The Iowa Attorney General reported on June 23, 2021, that Maximus, Inc. experienced a data breach involving unauthorized access to a server containing personal information of individuals associated with the Ohio Department of Medicaid (ODM). The breach occurred between May 17 and 19, 2021, affecting 1,589 Iowa residents, with a total of 334,690 individuals potentially impacted. The compromised information included names, dates of birth, Social Security numbers, and DEA numbers.

MAXIMUS notifies 3,029 patients after Business Ink mailing error exposes PHI. The error involves letters prepared and mailed by the Company’s print vendor, Business Ink. Because of the printing error, Business Ink accidentally mismatched one page of the six-page letter and some participants received information intended for another participant. MAXIMUS on learning about the printing error promptly launched an investigation. MAXIMUS has notified those program participants who were affected. The information in the letters included names, addresses, group and case numbers, and program type. The letters did not contain Social Security numbers, dates of birth, financial information, or information that could be used to access another person’s program account.