CMS NOTIFIES 946K INDIVIDUALS OF THIRD-PARTY DATA BREACH

Summary from the TLDR InfoSec newsletter

CMS has reported a data breach affecting over 946,000 Medicare beneficiaries. The breach occurred in May 2023. Hackers exploited a vulnerability in MOVEit software used by WPS, a CMS contractor. Although patched promptly, the vulnerability led to widespread data breaches across multiple sectors before being resolved.