Maximus Data Breach Exposes Sensitive Personal Info Including SSNs

Maximus US Services Inc., a government services company that administers health and human services programs for state and local governments across the United States, disclosed a data breach that exposed sensitive personal information.

On April 27, 2026, Maximus learned of a security incident involving the Nebraska Provider Data Management System (PDMS). The PDMS is a system that Maximus operates on behalf of NE DHHS. Healthcare providers who serve Medicaid enrollees in Nebraska are required to be enrolled in the PDMS in order to render services to those enrollees.

Maximus contacted NE DHHS that same day to report the security incident. The following day, April 28, 2026, the company provided additional details to the agency about what had occurred.

Maximus engaged a leading forensic firm, and the investigation determined on June 16, 2026, that personal information may have been affected by the incident. The types of personally identifiable information exposed included first and last names, dates of birth and Social Security numbers.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on July 28, 2026.

Maximus' response to the breach

The company is offering a free 24-month membership in Experian IdentityWorks, a credit monitoring and identity protection service. Affected individuals must sign up by Oct. 31, 2026.

Affected individuals who have questions or encounter issues can reach an Experian agent at 833-745-1429.