Two Unique DHS Cyber Incidents Exposed 1M People’s Data | Security Magazine

Two separate states' Department of Human Services (DHS) experienced data security incidents within two weeks of each other in 2026, affecting approximately 1 million people. The Illinois DHS incident, discovered in September 2025, exposed maps due to incorrect privacy settings, potentially impacting 700,000 residents. The Minnesota DHS incident, discovered in November 2025, involved unauthorized access to the MnCHOICES system by a user affiliated with a licensed health care provider, affecting 303,965 individuals. Exposed data included personally identifiable information (PII) such as names, addresses, and social security numbers, which could leave individuals vulnerable to phishing schemes and other cybercrimes.