All Breaches
May 2, 2025 Verified Sensitive Record Government

CMS Medicare.gov Accounts 2025 Data Breach

The CMS Medicare.gov accounts 2025 data breach involved unknown malicious actors using valid Medicare information obtained from external sources to create unauthorized online accounts.

107.2 Thousand
Reported Records
13
Data Types
High
Severity
Yes
Verification

Exposed Data Types

13
Personal information
Protected health information
Medicare beneficiary identifiers
Coverage start dates
Names
Dates of birth
Zip codes
Provider information
Mailing addresses
Dates of service
Diagnosis codes
Services received
Plan premium details

Additional Information

Added DateJuly 27, 2026
Breach DateMay 2, 2025
Domaincms.gov
SourceOfficial CMS notice confirming fraudulent Medicare.gov account creation
Last Content UpdateJuly 27, 2026

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information

Company Information

Company NameCenters for Medicare & Medicaid Services
SectorGovernment
CountryUnited States
Websitecms.gov

Risk Level

High

The reported impact exceeds 100 thousand and falls within the high severity band.

Protect Yourself

Check whether you were affected by this breach

Check Now