Maximus MOVEit data theft
Add to my breach checkMade public · 8,000,000 people
What leaked10
Hard to replace
- Driver's licence number
- Health insurance or Medicare number
- Mobile number
- Home or delivery address
- Email address
- Other profile data
Permanent
- Health information
- Social Security number
- Date of birth
- Full name
- Health informationmedical history, conditions, diagnoses, treatments, providers and prescriptions
- Social Security numberSSN or individual taxpayer identification number
- Driver's licence numberdriver's licence or state ID number
- Health insurance or Medicare numberMedicare Beneficiary Identifier or Health Insurance Claim Number; CMS is issuing new Medicare cards where the Medicare number was involved
- Mobile numbertelephone or fax number
- Other profile datahealth insurance claims, policy and enrollment information
To-dos13 · about 3 h 30 min in all
- Freeze your credit at Equifax, Experian and TransUnionStops: credit in your name (opens in a new tab)
- Get an IRS Identity Protection PINStops: tax refund fraud (opens in a new tab)
- Turn on instant transaction alertsHelps you notice: bank account fraud, scam calls
- Place a fraud alert on your credit reportsLimits harm from: credit in your name (opens in a new tab)
- Check your credit reports every week, freeHelps you notice: credit in your name (opens in a new tab)
8 more
- Do nowIf threatened: do not pay, keep the messages, report it to the policeLimits harm from: extortion
- This weekFreeze your NCTUE phone and utility fileLimits harm from: phone or utility account (opens in a new tab)
- When convenientKnow the scam pattern: calls and texts that cite these leaked detailsLimits harm from: phishing messages, scam calls
- When convenientTurn on your carrier's port-out lockLimits harm from: SIM swap
- When convenientTurn on your carrier's SIM-change lockLimits harm from: SIM swap
- When convenientCheck your health insurance statements for care you did not getHelps you notice: medical care in your name (opens in a new tab)
- When convenientRemove your address and phone from public profiles and tighten SNS privacyLimits harm from: visits or contact at home
- When convenientUse an authenticator app or passkey instead of SMS codesLimits harm from: SMS code theft
What happened next9 events
Disputes: 2 events
Back to latest- Order dismissing this member case of the MOVEit MDL
- Class action filed in the Eastern District of Virginia, later transferred to the MOVEit MDL in Massachusetts
- Company
- Maximus
- When it happened
- –
- Company detected it
- Made public
- Notice
- Leak confirmed
- Affected
- 8,000,000 people · at least 8 to 11 million; Maximus July 26, 2023, including about 612,000 Medicare beneficiaries · CMS
Sources
- Centers for Medicare & Medicaid Services regulator (opens in a new tab)checked October 22, 2026
- Maximus, Inc. company filing (opens in a new tab)checked October 22, 2026
- U.S. District Court for the District of Massachusetts docket court (opens in a new tab)checked October 22, 2026