Illinois Department of Human Services data breach affects 700K people

The Illinois Department of Human Services discovered on September 22, 2025 that internally created maps were publicly viewable due to misconfigured privacy settings, exposing addresses, case numbers, demographic details and medical assistance plan names for ~672,616 Medicaid/Medicare Savings Program recipients (names not included) and names/addresses/case data for 32,401 Division of Rehabilitation Services customers, affecting a total of 705,017 individuals; access was restricted, maps reviewed, affected people notified, and no misuse has been identified to date. The notice also references a separate December 2024 phishing incident that compromised employee accounts and exposed personal information of 1,166,094 people.