Illinois Department of Healthcare and Family Services
ent_8788124bb887c9a7a198ef40
Disclosures
3
HHS OCR · 1 jurisdiction
Incidents
—
no linked incident in sample
Max affected reported
8,848
as filed · HHS OCR IL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Illinois Department of Healthcare and Family Services
- Normalized
- illinois department of healthcare and family— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- ILHHS OCRas victim2021-03-22
Illinois Department of Healthcare and Family Services (IL Health Plan) reported to HHS on 2021-03-22 an Unauthorized Access/Disclosure affecting 8,848 individuals. An employee mailed PHI to the wrong recipients. Breached information on Paper/Films included names, dates of birth, addresses, SSNs, financial information, diagnoses, conditions, citizenship status, and other treatment information. The CE notified HHS, individuals, and media, and implemented additional administrative and technical safeguards. OCR provided technical assistance.
- ILHHS OCRas victim2018-04-26
Illinois Department of Healthcare and Family Services reported to HHS on 2018-04-26 a Unauthorized Access/Disclosure affecting 8000 individuals. Breached information located on Paper/Films. A state employee inadvertently changed client addresses and mailed PHI to wrong recipients. The CE implemented additional administrative safeguards.
- ILHHS OCRas victim2013-07-15
Illinois Department of Healthcare and Family Services reported to HHS on 2013-07-15 a Hacking/IT Incident (computer program error causing misdelivery) affecting 3,133 individuals. Business associate Family Health Network mailed member identification cards to wrong addresses due to a computer program error. PHI exposed included names, dates of birth, and State-issued Medicaid numbers. The BA corrected the conversion process, reviewed privacy policies, and notified HHS, the CE, affected individuals, and the media. OCR obtained documented assurances of corrective action.