The District of Columbia Department of Health Care Finance (DHCF) is notifying nearly 400,000 people about a major data exposure. The incident affected Medicaid and DC Healthcare Alliance beneficiaries who enrolled between 2023 and 2026. Rather than a hacker breach, the exposure occurred because two online reports inadvertently contained hidden personal information accessible to unauthorized users. The exposed details included Medicaid IDs, provider names, dates of birth, race, gender, ethnicity, and ward, though no Social Security numbers or financial information were compromised. The agency immediately removed the problematic reports, launched an internal review, and notified federal health officials and affected individuals.

Full report : The District of Columbia Department of Health Care Finance (DHCF) Hacking Exposes 400,000 Beneficiary Records.