Illinois Department of Healthcare and Family Services reports data breach exposing almost 1000 people
Learn More
The Illinois Department of Healthcare and Family Services (HFS) reports a data breach that exposed sensitive personal information of 933 individuals following a phishing attack that occurred in February 2025.
The phishing campaign targeted HFS employees on February 11, 2025 and successfully compromised one employee's email account. The attackers sent emails to HFS employees from another government email account the bad actor had previously hacked, so that the emails looked trustworthy to HFS employees.
The attackers gained access to sensitive documents and personal information. The compromised data includes:
- Customer names
- Social Security numbers
- Driver's license or state identification card numbers
- Financial information related to child support
- Child support identification and case numbers
- Medicaid identification and case numbers
- Dates of birth
HFS sent notification to affected individuals on May 23, 2025 and advised them to monitor their credit reports and consider placing fraud alerts or security freezes on their accounts.
