Maximus Inc. (US government contractor managing Medicare, Medicaid, student loan programs) was the largest single victim of Cl0p’s MOVEit campaign. SEC 8-K filed July 26 2023 disclosing 8-11M individuals’ PHI exposed. $15M remediation expenses recorded Q2 2023. Data included SSNs, PHI used for government program eligibility. CMS reported 2.34M Medicare beneficiaries affected. Maximus holds contracts with HHS, DOE, DOL. Class action litigation filed.