U.S. govt agency CMS says data breach impacted 3.1 million people

The CMS disclosed that Cl0p-linked intrusions into WPS via the MOVEit vulnerability resulted in the exposure of sensitive data for 3,112,815 individuals (including names, SSNs/ITINs, dates of birth, Medicare identifiers, and service dates). WPS had applied vendor patches in June 2023 but a later review found the breach occurred prior to patching; affected Medicare beneficiaries were notified and offered 12 months of Experian credit monitoring as the investigation continues.