Illinois IDHS Discloses Data Exposure Affecting Over 700,000 Individuals The Illinois Department of Human Services (IDHS) revealed a security incident on September 22, 2025, involving the unintended public exposure of sensitive data on internal planning maps. The breach stemmed from incorrect privacy settings on maps created by the IDHS Division of Family and Community Services’ Bureau of Planning and Evaluation, which were meant for internal use only. The incident impacted two groups: approximately 32,401 Division of Rehabilitation Services (DRS) customers and 672,616 Medicaid and Medicare Savings Program recipients. For DRS customers, exposed data—available from April 2021 to September 2025—included names, addresses, case numbers, and other personal details. Medicaid and Medicare recipients had addresses, case numbers, and demographic information exposed from January 2022 to September 2025, though names were not included in these records. IDHS confirmed no evidence of misuse but took immediate action to restrict map access and conduct a compliance review under state and federal privacy laws. A new Secure Map Policy has since been implemented, banning the upload of customer-level data to public platforms and limiting map access to authorized personnel. Notifications are being issued to affected individuals and regulatory bodies, including guidance on fraud alerts and security freezes.