DC Health Link
Disclosed Mar 8, 20233 years ago48,145 accountsUnverified
DC Health Link data including members of Congress posted on hacking forum
Data from Washington DC's health insurance exchange, including records of members of Congress and their staff, was offered on a hacking forum in March 2023. Exposed fields included names, contact details, dates of birth and Social Security numbers; officials later blamed a misconfigured server caused by human error.
What is known
| People affected | 48,145 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Mar 8, 2023 |
| Discovered | Mar 6, 2023 |
| Happened | Mar 6, 2023 |
| Attack | Exposed data |
| Data exposed | Dates of birth, Emails, Employment, Names, Phone numbers, Addresses, Financial, Government IDs, Social Security numbers, Insurance |
| Sector | Healthcare · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: DC Health Linkhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 8, 2023 | |
| Have I Been Pwnedaccounts in the data | Dec 14, 2023 | 48,145 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · attack: unknown to misconfiguration · seed source
- 2026-09-25 · data_types: ["dob","emails","employment","names","phone","addresses","financial","government-id"] to ["dob","emails","employment","names","phone","addresses","financial","government-id","ssn","insurance"] · seed source
- 2026-09-25 · disclosed: 2023-12-14 to 2023-03-08 · seed source
- 2026-09-25 · discovered: empty to 2023-03-06 · seed source
- 2026-09-25 · summary: In March 2023, DC Health Link discovered a data breach that was later publicly posted to a popular data breach forum. The impacted data included 48k unique email addresses alongside names, genders, dates of birth, home addresses, phone numb to Data from Washington DC's health insurance exchange, including records of members of Congress and their staff, was offered on a hacking forum in March 2023. Exposed fields included names, contact details, dates of birth and Social Security · seed source
- 2026-09-25 · title: empty to DC Health Link data including members of Congress posted on hacking forum · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.