Many Medicare beneficiaries will be issued new Medicare cards following a breach involving personally identifiable information (PII) and some personal health information. The Centers for Medicare & Medicaid Services (CMS) and Wisconsin Physicians Service Insurance Corporation (WPS) are notifying individuals whose information may have been affected.
This breach is linked to services provided by WPS, a contractor responsible for processing Medicare Part A and Part B claims on behalf of CMS. The issue arose from a software application used by WPS to transfer files, which was identified as a potential security risk. As a result, the personal information of Medicare beneficiaries and other individuals using the same providers may have been compromised.
Personal Information Potentially at Risk
The following personal information may have been exposed as a result of the incident:
- Full name
- Date of birth
- Social Security number or taxpayer identification number
- Medicare Beneficiary Identifier (MBI)
- Mailing address
- Hospital or provider account numbers
- Health insurance claim number
- Dates of service
Notification Recipients
Both CMS and WPS are sending written notifications to 946,801 Medicare beneficiaries who may have been impacted by the breach. These notices explain the nature of the incident and outline the actions being taken in response.
For individuals who may not receive a written notice due to outdated contact information, CMS is also publicly posting an announcement. Below is an example of the letter WPS is distributing:
Dear [Recipient],
The Centers for Medicare & Medicaid Services (CMS), the federal agency responsible for managing the Medicare program, and Wisconsin Physicians Service Insurance Corporation (WPS) are writing to inform you about an incident involving your personal information. This issue is connected to services provided by WPS, a CMS contractor that manages specific Medicare claims in your state.
The incident stemmed from a security vulnerability in MOVEit, a third-party software application used by WPS to transfer files during the Medicare claims process. Unfortunately, WPS is among many organizations in the United States affected by this software vulnerability.
We are providing this letter to help you understand the incident, the steps we are taking to address it, and what you can do to further safeguard your information. Along with this notice, we are offering free credit monitoring services and will issue you a new Medicare card with a new Medicare number.
Please note that this incident does not impact your current Medicare benefits or coverage.
Sincerely,
[CMS/WPS Team]
Actions Taken by CMS
CMS and WPS are collaborating with law enforcement agencies and cybersecurity forensic experts to thoroughly investigate the incident. CMS is committed to taking all necessary measures to safeguard the personal information of Medicare beneficiaries and prevent future breaches.
Steps Medicare Beneficiaries Can Take
WPS is offering affected individuals 12 months of free credit monitoring services through Experian. Beneficiaries are encouraged to take advantage of this service, which does not require providing any payment information to enroll.
Access Free Credit Reports
All individuals are entitled to one free credit report every 12 months from the three major credit reporting agencies. Beneficiaries should obtain these reports and review them for any unusual activity:
- Experian: Visit their website or call (888) 397-3742
- TransUnion: Call (800) 916-8800
- Equifax: Visit their website or call (888) 378-4329
Alternatively, request free credit reports online at annualcreditreport.com or call 1-877-322-8228. After receiving your reports, carefully review them for unauthorized accounts or suspicious activity.
Detect and Address Issues Early
Monitoring your credit is essential to identifying potential problems early. If you notice unauthorized activity:
- Report it to local law enforcement and request a copy of the report to share with creditors as proof.
- File a report with the Federal Trade Commission (FTC) through their website, by phone at 1-877-IDTHEFT (1-877-438-4338), or by mail at:
Federal Trade Commission
Consumer Response Center
600 Pennsylvania Ave, NW
Washington, DC 20580
Taking these steps can help beneficiaries detect and respond to issues quickly, protecting their personal and financial security.
Medicare Cards Update
Beneficiaries can continue using their current Medicare card until they receive a replacement. CMS is issuing new cards with updated Medicare Beneficiary Identifiers (MBIs) to those potentially affected.
When the new card arrives, beneficiaries should carefully follow the included instructions, which will specify when to start using the updated card. Once the new card is in use, the old card should be securely destroyed.
It’s important for beneficiaries to share their new Medicare number with healthcare providers promptly to avoid any disruptions or delays in payment processing.
Additional Information
For questions or assistance, beneficiaries can contact the confidential toll-free Experian response line at 833-931-5700. Be sure to reference Engagement Number B130492 when calling. Experienced professionals familiar with the incident are available to provide guidance on safeguarding your information against misuse.
The response line operates Monday through Friday, from 8:00 AM to 8:00 PM Central Time, excluding major U.S. holidays.
Not affiliated with or endorsed by Medicare or any government agency.
GET CONTRACTED WITH ESSENTIAL CARE INSURANCE AGENCY
For more information, please contact our office at 347-971-3399 or send an email to rdashevskyy@essentialcare.info.
Essential Care Insurance Agency provides Free Programs and Sales Tools for our Agents:
Please click on each link to learn more