Illinois health department exposed over 700,000 residents’ personal data for years

The Illinois Department of Human Services disclosed that an internal mapping website containing personal and program-related information was inadvertently publicly accessible from April 2021 until discovery in September 2025, exposing data for approximately 705,017 residents (672,616 Medicaid/Medicare Savings recipients and 32,401 rehabilitation services clients). Exposed fields included addresses, case numbers, demographic data, case statuses and names for the rehabilitation cohort; officials have not determined if the maps were accessed by unauthorized parties.