Illinois Department of Human Services (DHS) Data Breach and Notice
Avisery recently heard reports of Medicaid beneficiaries receiving notices from the Illinois Department of Human Services (IDHS) regarding the data breach that occurred in September 2025.
DHS uses an internal mapping website to allocate resources and to assist with decision making. In September 2025, DHS became aware that the website was made public. The maps contained Medicaid and Medicare Savings Program information, including a beneficiary's case number, address, demographic information, and which Medicaid program they are enrolled in. DHS immediately secured the map and created a policy that prohibits uploading customer data on a public website.
Notices were sent in early January. If individuals receive this notice, they can call a dedicated hotline (844) 695-1255 to leave a message; the call should be returned within 24 hours. IDHS is not aware of any attempted misuse of personal information because of this incident. Individuals can also contact one of the consumer reporting agencies to place a free fraud alert or security freeze on their credit files.
Click here to view the notice. Additional information can be found in a news report here: https://www.hipaajournal.com/illinois-department-of-human-services-data-breach-2025/
