The Centers for Medicare and Medicaid Services (CMS) and Wisconsin Physicians Service Insurance Corporation (WPS) have notified Medicare beneficiaries of a data breach caused by a vulnerability in the MOVEit software. MOVEit is used by WPS to transfer files during the Medicare claims process.
The breach, which occurred in May 2023, exposed sensitive personal information including, names, Social Security numbers, Medicare Beneficiary Identifiers (MBIs) and dates of service.
As a result of the data breach, MBIs for affected beneficiaries will be updated in October 2024, which could cause significant disruption to healthcare providers and patients.
Both healthcare providers and Medicare beneficiaries should take specific steps to minimize disruption and protect themselves from potential problems arising from the new MBIs being issued.
How Axxess Can Help: Use Axxess’ Medicare eligibility report to check for a current MBI termination date. If a termination date is present, access your fiscal intermediary portal to find the new MBI. Use Axxess DDE to monitor claim submissions. If a claim is returned due to an expired MBI, it will appear in the Axxess DDE RTP report. Identify the returned claim, suppress it and submit a new claim with the correct MBI from the electronic medical record (EMR). Axxess also provides RCM and DDE directly in our EMRs. Axxess DDE and Axxess RCM help clients increase revenue and get paid faster with real-time automated claims processing, billing support services and easy-to-use billing dashboards and widgets. |
Reverify Medicare Eligibility: Reverify the eligibility of all Medicare patients to ensure the new MBIs are in the system, preventing claims from being rejected due to outdated MBIs.
Update EMR and Billing Systems: Ensure EMRs and billing systems are updated with the new MBI. Coordinate with software vendors to facilitate smooth updates and avoid disruptions.
Train Staff: Train the front office, billing and administrative staff on the new MBI verification process to ensure correct entry of new MBIs and to avoid claims denials.
Communicate With Beneficiaries: Encourage beneficiaries to provide their new Medicare card and MBI at their next visit and update the records accordingly.
Monitor Claims and Payments: Closely monitor Medicare claims submissions, especially during the changeover period, to ensure that payments are processed smoothly with the new MBIs.
Prepare for Possible Issues: It’s unclear whether Medicare will provide a crosswalk between old and new MBIs, so be prepared to manage claims manually if necessary. Be prepared for potential delays or disruptions and have a plan in place to quickly resolve claims processing issues during the transition period. CMS may not have current contact information for the beneficiary, delaying notification of the new MBI.
Enroll in Experian Identity Protection Monitoring Services: WPS is offering a complimentary 12-month credit monitoring and identity theft protection service provided by Experian. The service includes daily credit report monitoring, suspicious alerts activity, fraud resolution assistance and identity theft insurance. A credit card or other form of payment is not required to enroll in the service.
New Medicare Cards: Affected beneficiaries will receive a new Medicare card with a reassigned MBI. This will ensure that personal information is protected and reduce the risk of fraud. Instructions on how to use the new card will be included. Beneficiaries are advised to destroy their old Medicare card when they receive their new one.
Access to Free Credit Reports: Beneficiaries are entitled to one free credit report annually from each of the three major credit bureaus: Experian, Equifax and TransUnion. These reports can help beneficiaries monitor their credit and identify any suspicious activity. Request your credit report at www.annualcreditreport.com or call (877) 322-8228.
Fraud Assistance From the Federal Trade Commission (FTC): Beneficiaries can access resources for preventing and reporting identity theft through the FTC. File identity theft complaints at www.ftc.gov/idtheft or call (877) 438-4338. The FTC also provides guidance on setting up fraud alerts or freezing accounts to prevent unauthorized access.
Medicare Assistance: For general assistance related to Medicare benefits or issues with the new MBI cards, visit the Medicare website or call (800) 633-4227.
Report Suspicious Activity: Beneficiaries should remain vigilant for fraudulent activity. If they notice suspicious credit activity or believe their information is being misused, they should file a police report and report fraudulent activity to creditors and the credit bureaus.