Maxim Healthcare Group
Disclosed Nov 4, 20214 years ago65,267 affectedConfirmed
The covered entity (CE), Maxim Healthcare Group, reported that multiple employees were victims of an email phishing attack affecting the protected health information (PHI) of 65,267 individuals. The PHI involved includes names, addresses, dates of birth, drivers’ license numbers, Social Security numbers, and claims and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services, changed passwords of affected accounts, implemented additional technical safeguards, and updated its policies and procedures.
What is known
| People affected | 65,267 (as reported to HHS) |
|---|---|
| Disclosed | Nov 4, 2021 |
| Happened | Oct 1, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Maxim Healthcare Groupoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: Maxim Healthcare Groupin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Maxim Healthcare Group (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 4, 2021 | |
| Indiana AGresidents of IN | Nov 4, 2021 | 124 |
| HHS archivetotal | Nov 4, 2021 | 65,267 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 28833 to 65267 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Maxim Healthcare Group, reported that multiple employees were victims of an email phishing attack affecting the protected health information (PHI) of 65,267 individuals. The PHI involved includes names, addresses, d · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 28833 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.