Health care data breach affects over 600k patients, Illinois agency says The Illinois Department of Human Services just fessed up to a major data blunder, where sensitive info like names, addresses, and case details for over 670,000 Medicaid recipients and 32,000 rehab patients was left exposed on public maps due to sloppy privacy settings from 2021 through 2025—talk about a rookie error in access controls. This slip-up highlights how easily misconfigured web tools can turn into a privacy nightmare, especially for agencies handling personal data without proper firewalls or user restrictions. IDHS only caught the issue in September 2025, promptly locked it down, and rolled out a new policy banning public uploads, but they’re still in the dark about who might’ve snooped around. For SMBs and MSPs, this is a stark reminder to audit your cloud settings regularly and use tools like role-based access controls to avoid similar headaches—after all, a quick config check today could save you from tomorrow’s PR disaster.

Source: https://www.nprillinois.org/illinois/2026-01-06/health-care-data-breach-affects-600-000-patients-illinois-agency-says