Aitkin County Health and Human Services Data Breach (2026)
The 2026 Aitkin County Health and Human Services data breach involved unauthorized access to three county employee email accounts from April 7 through April 8, 2026.
The affected total is not confirmed, so severity cannot be determined from a record count alone.
Exposed Data Types
7 sensitive18- Medical or health information
- Diagnosis information
- Treatment information
- Healthcare-provider names
- Medications
- Health-insurance identification numbers
- Health-insurance claims information
- Names
- Physical addresses
- Dates of birth
- Social security numbers
- Service dates
- Service locations
- Individual case identifiers
- PMI numbers
- Services received
- MnCHOICES form types and statuses
- MnCHOICES last-modified dates
About This Breach
The county discovered phishing messages on April 8, and its review confirmed that the contents of one account were downloaded.
HHS OCR reports 83,114 affected people. This is a regulatory notification population, not a local dataset, unique-email total, or searchable-record count. No person, patient, or email data is locally imported.
County-email fields may vary by person and include names, addresses, dates of birth, Social security numbers, service dates and locations, case identifiers, PMI numbers, medical or health, diagnosis, treatment, provider, medication, and insurance information. The narrower MnCHOICES or DHS report scope is names, case identifiers, PMI numbers, form types or statuses, last-modified dates, and service organizations or locations; fields must not be treated as universal or co-present.
The MnCHOICES report included people with no Aitkin County relationship, which can explain a count above the county population. The notice does not establish identity, county-service use or MnCHOICES participation, Minnesota residence, a medical condition, provider relationship, field ownership, or misuse; health and human-services associations must never be exposed through lookup results.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
