
More Than 6,000 Iowa Medicaid Members Affected by Data Breach
A concerning development was revealed by the Iowa Department of Health and Human Services regarding a data breach that occurred back in February.
Per KCRG, the Iowa Department of Health and Human Services revealed that Medicaid data for over 6,000 Iowans was accidentally posted to a state website on February 16th, 2026. The move impacted 6,717 Iowans, to be exact, and while the information leaked was minimal, it still raises concerns.
READ MORE: University of Dubuque Reveals Plans to Open New Medical School

While personal information wasn't posted, Medicaid subscriber IDs, the names of waiver programs associated with them, and dates of when personal eligibility assessments were scheduled and/or conducted were revealed, per KCRG. That said, no names, addresses, contact, or health information were shared.
Per the Federal Trade Commission, it is still possible for someone to commit medical identity theft with just a Medical ID number. The Iowa Department of Health and Human Services posted information on how to request a free credit report, in addition on how to freeze your credit if you suspect your identity has been stolen. You can find all of that information here.
READ MORE: Iowans Lost Over $42 Million Due to These Dangerous Scams
The department confirmed they have provided extra training for their staff since this data breach happened to prevent this from occurring in the future.
Scams are prevalent all throughout the country, including those of a medical nature, and Iowa is not immune. In 2023, Iowans lost a jaw-dropping $42 million to scammers on the internet. QRFY analyzed data from the Federal Trade Commission, and found that Iowa was the 40th most defrauded state in the US based on money lost relative to the state's population.
The final number was $42,571,728 lost across 12,999 reports to the FTC. That equates to $1.3 million lost per 100,000 residents. That's a confounding figure.
Find out more about a recent Medicaid data breach in Iowa on KCRG's website.
