CMS Breach Reported to Have Affected More Than 100,000 Medicare Recipients

The Centers for Medicare & Medicaid Services (CMS) reported a data breach potentially affecting over 100,000 Medicare recipients, exposing sensitive personal and medical information. Discovered on May 2, 2025, the breach involved unauthorized account creations by "malicious actors" over a two-year period, leading CMS to issue new identification numbers and deactivate compromised accounts. While no identity theft cases have been reported, the incident raises significant concerns about data security for healthcare technology systems and the need for robust safeguards to protect patient information. Healthcare professionals must remain vigilant and ensure their practices are compliant with evolving data protection standards to prevent similar breaches.

Opens on USA TODAY