Nearly 400,000 Medicaid Beneficiaries Caught in Medicaid and DC Healthcare Alliance Data Exposure
DC health officials say nearly 399,000 Medicaid and Healthcare Alliance beneficiaries had personal data exposed in public website reports.
The District of Columbia Department of Health Care Finance is notifying 399,086 Medicaid and DC Healthcare Alliance beneficiaries enrolled between 2023 and 2026 of a data exposure. On July 21, 2026, DHCF found that two public website reports contained hidden personal data, including Medicaid IDs, dates of birth, provider names, race, gender, ward, and ethnicity, that may have been reachable from 2023 until July 2026. Names, Social Security numbers, and financial details were not included. DHCF removed the reports, notified HHS, and said it has no evidence the data was accessed or misused.
- 399,086 Medicaid and DC Healthcare Alliance beneficiaries are being notified.
- Hidden data in two public reports was reachable from 2023 until July 2026.
- Exposed fields included Medicaid IDs and demographics, not SSNs or financial data.
- DHCF says it has no evidence the information was viewed or misused.
From the original article
2 min read at securityaffairs.com
Nearly 400,000 DC Medicaid and Healthcare Alliance beneficiaries may have had personal data exposed through reports published on a public website. The District of Columbia Department of Health Care Finance is notifying nearly 400,000 Medicaid and DC Healthcare Alliance beneficiaries that their personal information may have been exposed. The incident affects people who enrolled between […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.