CMS failed to satisfy the legal requirements developed to lessen financial losses to Medicare, despite the agency's notification of the almost 14,000 Medicare beneficiaries whose health identities were compromised in 14 security breaches between Sept. 23, 2009, and Dec. 31, 2011, according to a report from the HHS' Office of Inspector General. The report also calls on CMS to reissue identification numbers so the victims of the breaches continue to have Medicare coverage.