RansomwareLawFirm.com

ILLINOIS DEPARTMENT OF HEALTHCARE AND FAMILY SERVICES data breach

Incident readout

Company
ILLINOIS DEPARTMENT OF HEALTHCARE AND FAMILY SERVICES
Reported to
Illinois Attorney General
Filed
December 10, 2025
People affected
Not stated in the filing
Incident type in filing
Not stated
Our review
Investigation Open

Was this a ransomware attack?

The filing does not say ransomware was involved. We do not label an incident ransomware unless the company’s report says so. Whatever the cause, the steps to protect yourself and the legal question are the same.

What we know

The Illinois Department of Healthcare and Family Services (HFS) is a government agency responsible for managing the state's Medicaid program and providing essential health coverage and child support services to Illinois residents. As a public entity overseeing sensitive healthcare and financial assistance programs, the department collects and maintains extensive personal data, including medical histories, Social Security numbers, and financial eligibility records. In 2025, the department officially reported a data breach to the Illinois Attorney General, indicating that unauthorized access to its systems may have compromised the personal information of individuals served by the agency. If you received a data breach notification letter, it confirms that your personal data was stored within the affected environment. This notice is intended to inform you of the incident and provide guidance on the steps you should take to protect your identity and monitor your accounts for suspicious activity.

See every breach reported in Illinois or read what to do after a ransomware attack.

Other breaches reported in Illinois

Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.