This month, the Illinois Department of Human Services disclosed that from 2021-2025, more than 700k residents’ records were exposed online. What was meant to be sensitive information accessible only internally was misconfigured and exposed to the internet. It is unclear how this information came to light for them, but it’s unreasonable that this information was on the internet for 4 years before discovery.

In terms of exposed information, it seems to be names, addresses, case numbers, case statuses, referral source information, region, and office information. About 650k of the affected are those on Medicaid/Medicare who registered for a Savings Program. Though no names were exposed in that group, the other portion is those apart of the Division of Rehabilitation Services whos names were included.

Currently, the Department of Human Services says it is unable to see if the information was viewed. They have since moved the affected services to their intranet and notified all the residents whose information was exposed.