The Federal Centers for Medicare and Medicaid Services (CMS) have issued a warning to approximately 103,000 Medicare recipients, stating that their personal information might have been compromised due to a “data incident.” In response, these individuals will be provided with new Medicare numbers.
The agency clarified that, as of now, they have not received any reports of identity theft or misuse related to this issue, emphasizing that their actions are primarily precautionary.
Importance of the Situation
With over 66 million Americans relying on Medicare for medical benefits, any breach in CMS data security can lead to significant concern among recipients.
CMS has sent letters to over 100,000 beneficiaries, offering them “guidance on the actions they should take” to safeguard their personal data.
Key Details
A press release from Tuesday noted that the agency contacted a Medicare beneficiary. They indicated that personal information acquired from unknown external sources was used to identify suspicious activities, particularly concerning fraudulent online accounts for some beneficiaries.
To address these issues, CMS stated that they acted swiftly to disable the affected accounts while investigating the scope of the potential data breach and its possible impact on recipients.
The agency mentioned that inquiries began coming into their call center on May 2 from beneficiaries who had received letters confirming the creation of their Medicare.gov accounts.
The investigation revealed that “malicious actors” exploited valid beneficiary information to fraudulently create new accounts between 2023 and 2025. This data included details like Medicare Beneficiary Identifier (MBI), last names, ZIP codes, birthdates, and coverage start dates.
Using these accounts, CMS reported that the “bad actors” could access various personal details of Medicare recipients, including mailing addresses, provider information, diagnostic codes, services received, premium details, and service dates.
Affected individuals will receive new Medicare cards in the mail within a few weeks, featuring updated Medicare numbers.
On Monday, FBI Deputy Director Dan Bongino announced that the agency had concluded its largest medical fraud investigation in Department of Justice history, highlighting nearly $15 billion in losses, with approximately $245 million seized by authorities, and 324 individuals charged with various crimes.
In a letter to around 103,000 Medicare recipients, CMS remarked, “We are writing to inform you of incidents related to your personal information linked to your Medicare.gov account. A new Medicare card, along with your new Medicare number, will be mailed to you in the coming weeks to protect your privacy.”
The letter further noted, “This incident involved unknown bad actors who accessed your data to fraudulently create a medicare.gov account.”
Next Steps
CMS continues to investigate the details surrounding this “data incident,” including assessing whether sensitive personal information was indeed compromised.
