DC Health Link

Disclosed Mar 8, 202348,145 accountsUnverified

DC Health Link data including members of Congress posted on hacking forum

Data from Washington DC's health insurance exchange, including records of members of Congress and their staff, was offered on a hacking forum in March 2023. Exposed fields included names, contact details, dates of birth and Social Security numbers; officials later blamed a misconfigured server caused by human error.

What is known

People affected	48,145 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Mar 8, 2023
Discovered	Mar 6, 2023
Happened	Mar 6, 2023
Attack	Exposed data
Data exposed	Dates of birthEmailsEmploymentNamesPhone numbersAddressesFinancialGovernment IDsSocial Security numbersInsurance
Sector	Healthcare · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: DC Health Link

Notices filed

TotalMar 8, 2023

ResearchCount not stated

Accounts in the dataDec 14, 2023

Have I Been Pwned48,145 people

History of this record

source_type2026-09-25

aggregator to pressby seedSource

country2026-09-25

empty to USby seedSource

attack2026-09-25

unknown to misconfigurationby seedSource

data_types2026-09-25

["dob","emails","employment","names","phone","addresses","financial","government-id"] to ["dob","emails","employment","names","phone","addresses","financial","government-id","ssn","insurance"]by seedSource

disclosed2026-09-25

2023-12-14 to 2023-03-08by seedSource

discovered2026-09-25

empty to 2023-03-06by seedSource

summary2026-09-25

In March 2023, DC Health Link discovered a data breach that was later publicly posted to a popular data breach forum. The impacted data included 48k unique email addresses alongside names, genders, dates of birth, home addresses, phone numb to Data from Washington DC's health insurance exchange, including records of members of Congress and their staff, was offered on a hacking forum in March 2023. Exposed fields included names, contact details, dates of birth and Social Security by seedSource

title2026-09-25

empty to DC Health Link data including members of Congress posted on hacking forumby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about DC Health Link