Hacks & Exploits
DC Medicaid Agency Exposes Sensitive Data of 399,086 Beneficiaries
The District of Columbia's Department of Health Care Finance (DHCF) has alerted nearly 400,000 Medicaid beneficiaries about a potential data breach that may have exposed sensitive personal information. The U.S. Department of Health and Human Services Office for Civil Rights reported that unauthorized access to member data could affect 399,086 individuals.
According to DHCF, the breach involves members of the Medicaid and DC Health Care Alliance programs who enrolled between 2023 and July 2026. The agency discovered that two reports on its website contained hidden personal information that could be accessed by unauthorized users. These reports were meant to display only summary statistics, but underlying personal data, including Medicaid IDs, dates of birth, provider names, and demographic information, may have been exposed.
DHCF promptly removed the reports from its website and is currently reviewing its systems to ensure member information is secure. The agency has advised affected individuals to consider placing a free alert on their credit reports as a precaution. Although DHCF has not confirmed any misuse of the exposed information, it is reaching out to members to inform them of the situation.
FAQ
What happened with the DC Medicaid Agency?
The DC Medicaid Agency, specifically the Department of Health Care Finance (DHCF), reported a potential data breach that may have exposed sensitive personal information of nearly 400,000 Medicaid beneficiaries.
How many individuals were affected by the data breach?
The breach may have affected 399,086 individuals enrolled in the Medicaid and DC Health Care Alliance programs between 2023 and July 2026.
What type of personal information was exposed?
The exposed information may include Medicaid IDs, dates of birth, provider names, and demographic information that were hidden in reports intended to show only summary statistics.
What actions has the DHCF taken in response to the breach?
DHCF promptly removed the reports from its website and is currently reviewing its systems to ensure the security of member information.
What should affected individuals do as a precaution?
Affected individuals are advised to consider placing a free alert on their credit reports as a precaution, although DHCF has not confirmed any misuse of the exposed information.