CUPHD 2026 Data Breach
The 2026 CUPHD data breach affected 501 people according to the HHS record after an unauthorized person copied files from the district's network.
Exposed Data Types
3 sensitive8- Treatment information
- Diagnoses
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Social security numbers
- Financial account information
About This Breach
The Champaign-Urbana Public Health District (CUPHD) is a public agency that provides preventive-health and environmental-health services to the Champaign and Urbana communities in Illinois.
How Did the Incident Occur?
CUPHD detected suspicious activity involving its computer network on or around May 7, 2026, and moved to secure its systems. Its investigation found that an unauthorized person copied certain network files between May 6 and May 7. The district said its review of the affected information and individuals remained ongoing.
What Information Was Affected?
The files varied by person and may have contained names, addresses, dates of birth, treatment information, diagnostic information, health-insurance information including policy numbers, Social Security numbers, and financial-account information. The district's notice does not say that every listed field was present for every person.
How Did CUPHD Respond?
The district secured its systems, began an investigation to determine the scope, and said it was notifying required state and federal regulators. It also reviewed existing security policies and implemented additional safeguards intended to reduce the risk of a similar incident.
What Should Affected People Do?
Notice recipients should check the fields identified for them and monitor credit reports, financial-account activity, and health-insurance explanations of benefits for transactions they do not recognize. People whose Social Security or financial-account information was involved may also consider a free fraud alert or credit freeze.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
