February phishing campaign compromised Illinois health data, department says

The Illinois Department of Healthcare and Family Services on Friday announced a data breach resulting from a phishing attack earlier this year that compromised the personal information of 933 people, including 564 Illinois residents.

According to the notice, HFS discovered the phishing campaign targeting its employees on Feb. 11. The department claims the attacker used a previously compromised government email account to send deceptive emails, leading to the unauthorized access of one employee’s emails and documents.

“The bad actor sent emails to HFS employees from another government email account the bad actor had previously hacked, so that the emails looked trustworthy to HFS employees. As a result of these actions, one HFS employee’s emails and documents were compromised,” the notice reads.

Read more at StateScoop