DC Health Agency Exposes 400,000 Beneficiary Records

https://www.securityweek.com/wp-content/uploads/2024/05/healthcare-medical-data-breach-.jpeg

The District of Columbia Department of Health Care Finance (DHCF) is notifying nearly 400,000 people that their personal information was potentially compromised in a data breach.

According to the agency, the incident impacts Medicaid and the DC Healthcare Alliance beneficiaries who enrolled between 2023 and 2026.

The data breach was not the result of hacking. Instead, DHCF discovered in July that two reports on its website contained hidden personal information accessible to unauthorized individuals.

“These reports were intended to display only summary information about groups of people, such as enrollment counts and other statistics, and did not show anyone’s personal details on the screen,” DHCF said in an incident notice.

“However, underlying personal information that supported these reports may have been reachable by unauthorized users between 2023 and July 2026,” it added.

The exposed information included Medicaid IDs, provider names, dates of birth, race, gender, ethnicity, and ward. No...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

Read more