Centers for Medicare & Medicaid Services (CMS)

Under Review: 
No Review
Date Breach Made Public: 
October 11, 2012
Baltimore , MD
United States
Maryland US
Records Breached: 

363 (No SSNs or financial information reported)

Breach Total Number: 
Year of Breach: 
Type of organization: 
Type of breach: 

The CMS experienced 13 breaches between September 23, 2009 and December 31, 2011.  The CMS failed to notify beneficiaries of seven of the breaches in a timely manner.  The HHS's Office of the Inspector General (OIG) also alleges that the notifications mailed to beneficiaries did not disclose what type of information had been exposed, the date the breach occurred, or how CMS was working to prevent future breaches.