US government contractor says MOVEit hackers accessed health data of ‘at least’ 8 million individuals
Reading Time: 2 minutesU.S. government services contracting giant Maximus has confirmed that hackers exploiting a vulnerability in MOVEit Transfer accessed the protected health information of as many as 11 million individuals.
Virginia-based Maximus contracts with federal, state, and local governments to manage and administer government-sponsored programs, such as Medicaid, Medicare, healthcare reform, and welfare-to-work.
In an 8-K filing on Wednesday, Maximus confirmed that the personal information of a ‘significant number’ of individuals was accessed by hackers exploiting a zero-day vulnerability in MOVEit Transfer, which the organization uses to ‘share data with government customers pertaining to individuals who participate in various government programs.’
While Maximus hasn’t yet been able to confirm the exact number of individuals impacted — something the company expects to take ‘several more weeks’ — the organization said it believes hackers accessed the personal data, including Social Security numbers and protected health information, of ‘at least’ 8 to 11 million individuals. If the latter, this would make the breach the largest breach of healthcare data this year — and the most significant data breach reported as a result of the MOVEit mass-hacks.
Clop, the Russia-linked data extortion group responsible for the MOVEit mass-hacks, claims to have stolen 169 gigabytes of data from Maximus, which it has not yet published.
Maximus is one of just hundreds of organizations impacted by the MOVEit Transfer hacks to appear on Clop’s dark web leak site. This week alone, the ransomware group added a number of new victims, including accountancy giant Deloitte, and global sports betting provider Flutter, which owns Fox Bets and Poker Stars.
Clop also recently listed accountancy firms PwC and Ernst & Young as its latest victims.
Clop also this week listed Pensions Benefit Information, which provides pension plan management services to various industries. The organization has confirmed it was breached in a brief statement on its website but hasn’t said how many individuals have been impacted. Four of the organization’s clients — including CalPERS, CalSTRS, Genworth Financial, and Wilton Reassurance — have disclosed that the data of more than 4.75 million people had been accessed.
According to the latest figures from cybersecurity company Emsisoft, more than 500 organizations have so far been impacted by the MOVEit mass-hacks, exposing the personal information of more than 34.5 million people.
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG