FSSA details contractor security breach
Subscriber Benefit
As a subscriber you can listen to articles at work, in the car, or while you work out. Subscribe Now
The Indiana Family and Social Services Administration on Friday announced a security breach affecting Indiana Medicaid members. The agency said the breach involved software used by a contractor that exposed certain personal information.
The contractor, Virginia-based Maximus Health Services Inc., informed the FSSA about the breach in its MOVEit software, which occurred in late May, the agency said in a news release.
The breach exposed the names, addresses, case numbers and Medicaid numbers of more than 744,000 members of Indiana Medicaid, as well as the Social Security numbers of four more members.
The FSSA said the Hoosiers affected are members of Medicaid who had received a communication from Maximus regarding the selection of a managed care entity. Maximus is contacting all affected members with information and options for credit monitoring.
Maximus has served as the enrollment broker for the Indiana Health Coverage Programs since 2007, according to the FSSA’s website. The company provides “program education to newly enrolled members, counseling on how to select a managed care entity, and health plan assignment for those members who choose not to select a plan.”
In late July, the Centers for Medicare & Medicaid Services said it was responding to the breach. At the time, the CMS estimated the breach impacted about 612,000 current Medicare beneficiaries.
Anyone seeking additional information can call 1-833-919-4749.