The health department of the US state of Illinois has confirmed that a years-long security breach left the personal information of more than 700,000 residents of the state exposed.
The Illinois Department of Human Services (IDHS) said A statement on January 2 An internal mapping website containing residents’ personal information, which officials use to help allocate state resources, was inadvertently publicly viewable from April 2021 to September 2025, when a security breach was discovered.
Officials said the exposed data included personal information of 672,616 individuals who are Medicaid and Medicare Savings Program recipients. The data included their addresses, case numbers and demographic data – but not the names of the individuals.
The exposed data also included names, addresses, case status and other information related to 32,401 individuals receiving services from the department’s Rehabilitation Services Division.
IDHS said it was unable to determine whether anyone viewed the publicly displayed maps during the four years they were available on the Web.

