CMS NOTIFIES 103K MEDICARE BENEFICIARIES ABOUT UNAUTHORIZED ACCOUNT CREATION

Summary from the TLDR InfoSec newsletter

The HHS Centers for Medicare and Medicaid Services (CMS) was recently alerted that Medicare.gov accounts had been created for 103K individuals without their knowledge. The investigation determined that the accounts were created using information gathered from external sources. The unknown threat actor could use their access to view the user's Medicare beneficiary ID, coverage start date, birth date, and zip code.