Over 600,000 Medicare Patients Impacted by Data Breach

If your office is receiving an “invalid member ID” result when checking Medicare eligibility, it may be linked to a recent Medicare data breach.

Approximately 612,000 Medicare beneficiaries are being offered free credit monitoring services for 24 months due to a May 2023 data breach in the MOVEit Transfer software on the corporate network of Maximum Federal Services, a Medicare contractor. 

The breach involved a hack of Medicare beneficiaries’ personally identifiable information (PII) and/or protected health information (PHI). No HHS or CMS systems were impacted, according to the July 28, 2023 Data Safety press release.

When checking eligibility and an invalid member ID flag is raised, ask your patient if they have received a new Medicare card.  You can also access your MAC secure internal portal and use the MBI look-up tool in the event the patient has not received their card yet.