06/23/2021

Medicaid Cybersecurity Incident Announcement

The Ohio Department of Medicaid was notified by their contracted provider data manager, Maximus, that Maximus experienced a cybersecurity incident on May 17, 2021, potentially impacting provider names, social security numbers, addresses, and other information. We understand that Maximus has taken investigatory steps, enhanced cyber security protocols, and has made Experian identify theft monitoring available to those impacted.

Ohio Medicaid is monitoring the progress of the investigation and will continue working with Maximus as they remedy the situation.

What do I need to know?

Ohio Medicaid providers will begin receiving notices from our IT vendor Maximus regarding a cybersecurity incident potentially exposing personal data. Due to the volume of providers impacted, ODM anticipates that frontline staff within Medicaid as well as those with ODA, MHAS, ODH, ODE, and DODD may receive inquiries from providers receiving notifications.

What can Medicaid providers do?

Maximus is offering providers, at no cost, 24 months of credit monitoring and other services from Experian.

Medicaid providers who received a letter regarding this incident or who have questions about credit monitoring services should contact Experian’s dedicated assistance line at (800) 357-0823, Monday to Friday between 9:00 AM-11:00PM EDT and Saturday to Sunday 11:00 AM-8:00 PM EDT.

Who to call for questions?

If you or your providers have additional questions, they should be directed to Maximus at email address questions@Maximus.com. Additional information is available at https://maximus.com/questions.

What if a reporter calls?

Maximus will be handling all calls from media. Inquiries should be directed to Maximus Corporate Communications at media@maximus.com.

What impact will this have on centralized credentialling go-live date, slated for July 26?

ODM and the OMES vendor teams have been evaluating the potential impact to the work schedule while the Maximus servers have been offline. More information will be shared soon.