CMS reports hacking incident affecting over 100,000 records
Centers for Medicare & Medicaid Services (CMS) filed a report with HHS OCR on June 30, 2025, disclosing a hacking/IT incident that compromised the data of 107,154 individuals. The breach occurred on a network server. CMS is classified as a Health Plan under HIPAA. Healthcare administrators should note the scale of this federal breach as a benchmark for potential risks to their own systems.
Primary source: HHS OCR Breach Portal — Centers for Medicare & Medicaid Services (MD) · reported 06/30/2025 · 107,154 individuals · Checked against the record 2026-10-10