Archive — US — techcrunch
Illinois health department exposed over 700,000 residents’ personal data foryears
The Illinois Department of Human Services confirmed a years-long security lapse that exposed personal data of over 700,000 residents. This data was publicly accessible from April 2021 until the discovery of the breach in September 2025, including details for Medicaid and Medicare recipients. The department could not ascertain if the data was viewed during this time.
Key points
- Security lapse exposed personal information of more than 700,000 residents.
- The exposure occurred from April 2021 to September 2025.
- Data included addresses, case numbers, demographic data for 672,616 Medicaid and Medicare recipients.
- Also included were names, addresses, case statuses for 32,401 individuals from Rehabilitation Services.
- IDHS could not determine if the exposed data was accessed.
Why it matters
- This incident highlights ongoing concerns about data privacy and security in public health databases.
- The increasing reliance on digital platforms raises risks associated with data breaches and cybersecurity.
- Similar data exposure incidents have prompted legislative efforts for stronger data protection policies across the U.S.
This significant data breach underscores the critical need for enhanced cybersecurity measures in public organizations to protect sensitive information.