Included in the information exfiltrated as part of the breach were individuals’ names, birthdates, Social Security numbers, Medicare account numbers, addresses, and health insurance details, said the Centers for Medicare & Medicaid Services and the Wisconsin Physicians Service Insurance Corporation, which is the state’s Medicare claims management contractor. Such a compromise was only discovered by WPS in May after an investigation revealed that Wisconsin residents’ information had been accessed from May 27 to May 31, 2023, or before it was able to apply patches to the vulnerable MOVEit instance.

Source: SC Magazine