Maximus Data Breach Affects 4,514 Texans: SSNs Exposed

In late April 2025, Maximus, Inc., a major government services provider, reported a significant data breach affecting thousands of Texans. According to the disclosure filed with the Texas Attorney General’s office, the breach impacted 4,514 individuals in Texas alone.

Sensitive consumer information was exposed, including names, addresses, Social Security numbers, driver’s license numbers, government-issued identification numbers (such as passport or state ID cards), dates of birth, medical information, health insurance details, and other personal data.

This means both personally identifiable information (PII) and protected health information (PHI) were compromised.

The breach was officially disclosed to the Texas Attorney General’s office on April 29, 2025. The company’s wide range of government contracts and handling of sensitive public sector data further amplify the seriousness of the situation.

For those interested in the official disclosure, you can review the details on the Texas Attorney General’s data security breach reports page.

Maximus’ response

Maximus, Inc. responded to the breach by notifying affected consumers through multiple channels. The company sent notices by U.S. mail, published information in print media, and broadcasted details on Texas-wide media platforms to ensure broad awareness. If you believe you may be affected, it is important to closely monitor your financial accounts, credit reports, and health insurance statements for any unusual activity. Because Social Security numbers, government IDs, and health information were exposed, you should consider placing a fraud alert or credit freeze with major credit bureaus and contacting your health insurance provider to flag your account for suspicious claims.

Although the company has not publicly detailed specific resources such as credit monitoring or identity theft protection, it is common in breaches of this magnitude for companies to offer such services. Review any mailed notifications from Maximus for information about support or remediation steps. If you have not received a notice but believe your information may have been involved, contact Maximus directly or visit their official website for guidance.

For more about the company and its services, visit the Maximus website.