Illinois Department of Human Services and Illinois Department of Healthcare and Family Services

The covered entity (CE), Illinois Department of Healthcare and Family Services, reported that previous members of households may have retained access to CE accounts after their access should have been terminated, and viewed protected health information (PHI) for members of their former households. The PHI involved included names, addresses, birthdates, Social Security numbers, financial information, and diagnoses. The breach affected 1,960 individuals. The CE notified HHS and the affected individuals of the breach. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.