DC Health Agency Exposes 400,000 Beneficiary Records
Washington DC's health finance agency exposed records on nearly 400,000 Medicaid beneficiaries through public reports.
The District of Columbia Department of Health Care Finance is notifying 399,086 Medicaid and DC Healthcare Alliance beneficiaries that personal data may have been reachable through two public website reports from 2023 until July 2026. The reports were intended to show only aggregate statistics, but underlying fields included Medicaid IDs, provider names, dates of birth, race, gender, ethnicity, and ward. Names, Social Security numbers, and financial information were not exposed. DHCF said it has no evidence of misuse, removed the reports after discovering the issue in July, and reported the incident to HHS.
- About 399,086 beneficiaries enrolled from 2023 to 2026 were notified.
- Exposure came from hidden data in public statistical reports, not a hack.
- Records included Medicaid IDs, birth dates, demographics, and provider names.
- Names, Social Security numbers, and financial data were not included.
- Countries
- United States
From the original article
1 min read at securityweek.com
The Medicaid IDs and other information of Medicaid and DC Healthcare Alliance beneficiaries were exposed. The post DC Health Agency Exposes 400,000 Beneficiary Records appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.