Iowa Department of Health and Human Services – Iowa Medicaid Enterprise (Iowa HHS-IME)

The Iowa Department of Health and Human Services (HHS) has reported a data breach that impacted some Iowa Medicaid members. The breach occurred due to a cyber-attack on a contractor’s computer systems between June 30 and July 5, 2022. The contractor, Telligen, Inc., which performs annual assessments for Medicaid members, subcontracted part of that work to Independent Living Systems (ILS). ILS suffered a data breach that resulted in the exposure of personal information belonging to more than four million individuals across several states, including approximately 20,800 Iowa Medicaid members.

The compromised information included full names, Medicaid details, and other sensitive information. ILS detected the network intrusion on July 5, 2022, and reported the incident to the FBI and other authorities. An investigation was launched to determine what data was compromised. ILS informed Telligen of the breach on February 14, 2023, and Telligen notified Iowa HHS and Medicaid on February 17, 2023