DC Health Agency Data Breach Exposes 400,000 Beneficiary Records

The DC Department of Health Care Finance (DHCF) is notifying 399,086 people that their personal information was potentially exposed. Hidden data in two website reports was reachable by unauthorized users from 2023 to July 2026. The incident was not caused by hacking.

• Breach affects 399,086 Medicaid and DC Healthcare Alliance beneficiaries
• Exposed data was reachable from 2023 through July 2026
• Leaked data included Medicaid IDs, birth dates, race, gender and ward
• No Social Security numbers, names or financial data were compromised