2026 Meridian Health Plan of Illinois — provider portal access flaw; 21,027 members (Apr)
Data compromised
Per Meridian online notice June 17, 2026: varying by individual—member names, Member ID numbers, dates of birth, contact information, and limited eligibility or claims-related details
Technical writeup
Verified health-plan data breach — disclosed June 2026. Meridian Health Plan of Illinois (Meridian of Illinois), a Centene Corporation subsidiary providing government-sponsored Medicaid and Medicare plans, learned April 28, 2026 of an incident in how some providers were given access to its online system that may have allowed an unauthorized actor to view or download member information. Meridian disabled involved accounts, notified law enforcement, and posted an online notice June 17, 2026. The U.S. HHS Office for Civil Rights breach portal lists Meridian Health Plan of Illinois with 21,027 individuals affected, submitted June 19, 2026, classified as unauthorized access/disclosure on a network server. Meridian stated it had no evidence of misuse at notice time.
Root cause
Incident in how some providers were given access to Meridian of Illinois online system April 28, 2026; unauthorized actor may have viewed or downloaded member information per company notice and HHS OCR filing