Pursuant to the requirements of the Illinois Personal Information Protection Act, 815 ILCS 530/12, the Illinois Department of Healthcare and Family Services (HFS) is notifying the media of an incident within the State of Illinois systems.
On or about February 11, 2025, HFS became aware that a bad actor was conducting a phishing campaign targeting HFS employees and attempting to gain access to their usernames and passwords. The bad actor sent emails to HFS employees from another government email account the bad actor had previously hacked, so that the emails looked trustworthy to HFS employees. As a result of these actions, one HFS employee’s emails and documents were compromised.
Immediately upon discovery, HFS worked with the Illinois Department of Innovation and Technology (DoIT) to block the link contained in the email and reset any employee’s password that may have been compromised. HFS also communicated with all employees about the active threat and reminded them about appropriate actions to take or not take when presented with a request for their state credentials.
The information compromised differed for each individual impacted, but may have included customer names, social security numbers, driver’s license or state identification card numbers, financial information related to child support, child support or Medicaid identification and case numbers, and date of birth. The total number of individuals impacted was 933, of which 564 were Illinois residents. The Department completed notifying the affected clients on May 23, 2025.
Potentially affected Individuals with a question about this incident can email HFS.Privacy.Officer@Illinois.gov. Potentially affected individuals can also contact consumer reporting agencies to place a free fraud alert or security freeze on their accounts, or the Federal Trade Commission to learn more about fraud alerts, credit freezes, or other identity theft resources.
| Equifax www.equifax.com/personal/ P.O. Box 105788 Atlanta, GA 30349888-766-0008 | Experian www.experian.com P.O. Box 9554 Allen, TX 75013888-397-3742 | TransUnion www.transunion.com P.O. Box 2000 Chester, PA 19016800-680-7289 |
Federal Trade Commission
600 Pennsylvania Ave., NW
Washington, DC 20580
877-382-4357 (Consumer Help Line)
877-438-4338 (Identity Theft Line)
IdentityTheft.gov
***Courtesy of the Illinois Department of Healthcare and Family Services***
