Hacker breaches defences of Ohio Medicaid’s data manager

The incident potentially exposed providers’ names, social security numbers, addresses and other information. But people covered by Medicaid, which covers health care costs, were unaffected, local media reported.

A credentialing and licencing data app was accessed by an unknown party between 17 and 19 May before Maximus took it offline, launched an investigation with a cyber security firm, activated response protocols, and notified law enforcement.

There is no evidence any of the exposed information has been misused and no other Maximus server, application or customer were affected, the Virginia-based contractor of government health data services said. It posted letters to affected providers on 18 June.