> These files contained the following information: full names, Social Security numbers, Medicaid ID numbers, Medicare ID numbers, dates of birth, home addresses

> These files contained the following information: full names, Social Security numbers, Medicaid ID numbers, Medicare ID numbers, dates of birth, home addresses and other contact information, demographic or income information, clinical and medical information, and health insurance information. Was this information not at least encrypted? I have zero doubt that, as a business associate for a covered entity, Maximus will be held responsible for all 4 million of those HIPAA violations, and will not only fix their controls, but speedily pay the fines.