Maxim Healthcare

Maxim Healthcare is an organization headquartered in the United States of America. The entity handles protected health information as part of its operations, as evidenced by the 2020 security incident involving employee email accounts. This indicates that Maxim Healthcare provides services that involve access to patient data. The organization’s activities require it to maintain systems for storing and transmitting personal and medical details of individuals. Its workforce includes employees whose email accounts were compromised, showing it employs staff who interact with patient information.

On October 1, 2020, Maxim Healthcare experienced unauthorized access to multiple employee email accounts over a multi‑month period. The breach exposed personal and medical details of 65,267 patients, including names, contact information, medical histories, treatment records, government health identifiers, and login credentials, with Social Security numbers affected for some individuals. Following detection of unusual account activity, the organization conducted a comprehensive review of all email contents but could not confirm exactly which data were viewed. In response to the incident, Maxim Healthcare implemented mandatory multi‑factor authentication for all email accounts. It also upgraded its monitoring capabilities by establishing a new Security Operations Center. These measures were intended to strengthen the protection of the protected health information entrusted to the organization.