Home / Incidents / Data breach
Two US state human services agencies expose a million people
An Illinois misconfiguration and excessive internal access in Minnesota exposed benefits data.
- Organisation
- Illinois & Minnesota DHS
- Disclosed
- 3 January 2026
- Affected
- 1,000,000
- Data
- Public assistance, personal, financial data
- Attacker
- None (exposure)
- Severity
- major
- Region
- Global
- Source
- CM Alliance monthly roundup ↗
Cite this
Nuffield Consulting, “Two US state human services agencies expose a million people”, The Daily Tech Wire outage & breach log, 3 Jan 2026. https://techwire.nuffieldconsulting.com/incidents/2026-01-03-illinois-minnesota-dhs-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: CM Alliance monthly roundup, https://www.securitymagazine.com/articles/102089-two-unique-dhs-cyber-incidents-exposed-1m-peoples-data.
Related incidents
- 22 Jan 2026Under Armour breach affects 72 million customersUnder Armour · breach · Unknown · 72M records
- 14 Jan 2026Canadian investment regulator breach exposes 750,000 investorsCIRO · breach · Unknown · 750K records
- 24 Jan 2026WorldLeaks claims 1.4TB of Nike internal dataNike · breach · WorldLeaks
- 24 Jan 2026Crunchbase confirms breach after ShinyHunters leakCrunchbase · breach · ShinyHunters · 2M claimed
- 6 Jan 2026Hackers claim breach of 1 million Brightspeed customersBrightspeed · breach · Crimson Collective · 1M claimed