A major cybersecurity incident has exposed sensitive personal and health records of tens of thousands of Americans.

In a notice, the Centers for Medicare & Medicaid Services (CMS) says 103,000 individuals across the United States with accounts on Medicare.gov are impacted by a data breach.

CMS says it discovered that user data had been compromised after receiving multiple complaints through its call center. According to the federal agency, hackers may have used information from external sources to collect data such as names, dates of birth, Medicare Beneficiary Identifiers, coverage start dates and ZIP codes to fraudulently create Medicare.gov accounts.

Once inside, the thieves gained access to more sensitive data, including provider details, mailing addresses, dates of service, diagnosis codes, services received and plan premiums.

“On May 2, 2025, representatives at our 1-800-MEDICARE call center flagged complaints from people with Medicare who had received a letter through the mail about the creation of a Medicare.gov account. However, these callers hadn’t created the accounts or asked anyone else to do it for them.

Noticing the similarities in the reports, we investigated further and discovered more cases of accounts created between 2023 and 2025 that matched this pattern. We quickly deactivated those accounts, while also launching a larger effort to find the bad actors who created them.”

The CMS is a federal agency under the U.S. Department of Health and Human Services tasked with overseeing the country’s healthcare programs, including Medicare, Medicaid, the Children’s Health Insurance Program and Health Insurance Marketplace.

The CMS is encouraging affected individuals to get a free credit report from each of the three major nationwide credit reporting companies. The agency also says that it hasn’t received any reports of identity fraud or improper use of personal information as a result of the incident.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

Krispy Kreme is warning tens of thousands of Americans that they are now at risk of identity theft and fraud following a major cybersecurity incident.

In a new filing with the Office of the Maine Attorney General, the doughnut and coffeehouse giant says it has discovered a computer hack affecting 161,676 employees, former employees and members of their families.

In a statement, the firm says that an unknown actor gained unauthorized access to the retailer’s information technology systems, stealing multiple types of data.

According to Krispy Kreme, the attacker may have siphoned sensitive personal information, including names, Social Security numbers, dates of birth and driver’s license or state ID numbers. The thief may have also copied financial data such as financial account access records, credit or debit card entries, along with security codes, as well as usernames and passwords to financial accounts.

Other customer data that might have been seized include digital signatures, usernames and passwords, email addresses and passwords, biometric records, USCIS or Alien Registration Numbers, US military ID numbers, medical or health records and health insurance entries.

“On November 29, 2024, Krispy Kreme became aware of unauthorized activity on a portion of its information technology systems. Upon learning of the unauthorized activity, we immediately began taking steps to investigate, contain, and remediate the incident with the assistance of leading cybersecurity experts.

On May 22, 2025, our investigation into the incident determined that certain personal information was affected. There is no evidence that the information has been misused, and we are not aware of any reports of identity theft or fraud as a direct result of this incident.”

Krispy Kreme says it abruptly sent letters of notification to affected customers to provide more information about the cybersecurity incident, while offering free credit monitoring and identity protection services.

The firm says it is revamping its security protocols “to further protect the privacy of the data entrusted to us.”

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

A cybersecurity incident may have exposed sensitive personal, health and financial records of tens of thousands of Americans.

The latest numbers from the U.S. Department of Health and Human Services Office for Civil Rights show that 36,659 Americans are affected by a hacking/IT incident at Cumberland County Hospital (CCH).

CCH says that an unknown attacker breached its systems and stole patient and employee data, which may include names, dates of birth, addresses, phone numbers, email addresses, ethnicities, Social Security numbers, medications, diagnoses, treatment notes, dates of service, medical record numbers, health plan numbers, claims and billing records.

The hospital also says that the thief may have siphoned the employment data of current and former employees, including driver’s licenses, birth certificates, background check records, W-4 and W-2 tax forms and bank account numbers.

“On April 3, 2025, CCH discovered unauthorized access by a third party to our computer system. We immediately shut down all computers, disabled data sharing connections, contacted law enforcement, and began investigating…

Cybersecurity experts determined that the unauthorized access to our computer system began on February 21, 2025, and ended on April 3, 2025.

The electronic medical records system that CCH and its partners use to record and bill for patient care was not involved or accessed in this incident. “

CCH is a Kentucky-based hospital offering outpatient and inpatient healthcare services.

The hospital says it immediately sent letters of notification to affected individuals to shed more light on the data breach, while offering free identity monitoring services for 12 months.

For now, CCH says that its IT team has revamped the hospital’s security protocols to prevent a similar incident from happening again.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

A major cybersecurity incident affecting the sensitive personal and financial information of hundreds of thousands of Americans has been revealed.

In a new filing with the Office of the Maine Attorney General, Georgia-based healthcare firm Harbin Clinic says it discovered a serious breach affecting 210,140 people.

The firm says an unknown attacker gained unauthorized access to the database of its third-party vendor, Nationwide Recovery Services (NRS), stealing customer records, including names, addresses, Social Security numbers, dates of birth and financial account records.

The Harbin Clinic says it uses NRS for a debt collection service to recover funds from customers with delinquent accounts.

“It is our understanding that, in July 2024, NRS discovered suspicious activity related to its information technology systems, which resulted in a network outage. NRS indicated that it determined through an investigation that there was unauthorized access to the NRS network between July 5th, 2024 and July 11th, 2024, during which time certain files and folders were illegally copied from NRS’s systems by someone without authorization. NRS reported it [and] began a lengthy review to determine what information was contained on the impacted NRS systems and which NRS clients were impacted.

As a result of this review, NRS notified Harbin Clinic in February 2025 that information from Harbin Clinic’s patients may have been present on the impacted systems, but it was not yet able to identify which individuals had been impacted.” 

Harbin Clinic is a multi-specialty medical group offering a wide array of services, such as family medicine, internal medicine, oncology and cardiology.

The firm says it immediately sent letters of notification to affected customers to inform them about the data breach, while offering free identity monitoring services to affected individuals.

Harbin Clinic says it has not yet detected any instance involving the misuse of customer data. The firm is also urging customers to stay vigilant and report any suspicious activity related to their financial accounts.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

A major cybersecurity incident at a fintech firm may have leaked sensitive personal and financial information of over 100,000 Americans.

In a filing with the Office of the Maine Attorney General, Valsoft Corporation, which does business in the US as AllTrust Networks, says it learned of a data breach affecting 161,359 customers.

The firm says an internal investigation revealed that the breach potentially exposed data overseen by its subsidiary, including names, Social Security numbers, state-issued identification numbers and financial records.

“On February 14, 2024, [Valsoft] became aware of unusual activity on a non-production computer network which is owned and managed by our subsidiary Aspire USA. Our internal security team identified an in progress file transfer which they were able to interrupt mid-transfer.

The investigation determined that an unauthorized actor accessed their network between February 12, 2024, and February 15, 2024, and took certain files within their network during that time. While the investigation was able to confirm that certain systems were accessed, it was unable to confirm which specific files within those systems were actually accessed or taken.” 

AllTrust Networks provides cash checking and risk management software to retailers that allows customers to encash their checks on-site.

The firm says it abruptly sent letters to individuals impacted to provide more information about the security incident while offering free 12-month credit monitoring services.

For now, the firm says affected customers should remain vigilant and immediately report any instance of fraud or identity theft to law enforcement.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney