Almeida Law Group is investigating a data breach at Meridian Health Plan of Illinois. If you were affected, contact Almeida Law Group.
About Meridian Health Plan of Illinois
Meridian Health Plan of Illinois, Inc. is a provider of government-sponsored managed care services to families, children, seniors, and individuals with complex medical needs. It operates Medicaid and Medicare-Medicaid plans, as well as the YouthCare HealthChoice Illinois program for DCFS youth. The company is a wholly owned subsidiary of Centene Corporation and operates statewide in Illinois.
What Happened?
Meridian Health Plan of Illinois was listed in an HHS Office for Civil Rights breach portal report submitted on June 19th, 2026. The incident was classified as an unauthorized access/disclosure involving information stored on a network server, and it affected 21,027 individuals.
According to Meridian’s own breach notice, on April 28th, 2026, Meridian learned of a problem involving how some providers had been given access to its online provider portal. As a result, someone who should not have had access may have viewed or downloaded member information. Meridian states it immediately launched an investigation, disabled the accounts involved, and notified law enforcement. The company also stated there is no evidence that the information has been misused. No external threat actor or ransomware group has been publicly attributed to this incident.
The information involved varies by individual but may include member names, Member ID numbers, dates of birth, contact information, and limited eligibility or claims-related details, according to Meridian’s breach notice. No credit monitoring offer was mentioned in the notice.
Meridian’s parent company, Centene Corporation, has its own prior breach history. A separate Centene incident involved six missing hard drives containing health records of approximately 950,000 individuals. Additionally, in 2025, Centene and its subsidiary Health Net Federal Services paid $11,253,400 to settle Department of Justice False Claims Act allegations for falsely certifying cybersecurity compliance in a TRICARE contract covering 2015 through 2018. No class action lawsuits or litigation specifically connected to the April 2026 Meridian provider portal incident have been reported as of the research date.
Key Facts at a Glance
- Company or Organization: Meridian Health Plan of Illinois
- Industry: Health Plan / Medicaid Managed Care Organization
- Location: Illinois (statewide); parent company Centene Corporation headquartered in St. Louis, Missouri
- Incident type: Unauthorized Access/Disclosure
- Date breach discovered: April 28th, 2026
- Date of consumer notification: June 19th, 2026
- Total persons affected: 21,027
- Prior breach: No prior HHS breach reports specific to Meridian Health Plan of Illinois; parent company Centene Corporation had a prior incident involving missing hard drives affecting approximately 950,000 individuals, and paid $11,253,400 in a 2025 DOJ cybersecurity compliance settlement
- Litigation status: No class action or litigation specifically tied to this incident reported as of research date
- Source: HHS Office for Civil Rights Breach Portal; Meridian Provider Portal Incident Notice
What Should You Do?
If you received a notice from Meridian Health Plan of Illinois, you should take steps to protect yourself right away. Because health plan membership information such as names, Member ID numbers, and dates of birth was involved, review your Explanation of Benefits statements and any medical records for services you did not receive or authorize. You can also place a fraud alert or credit freeze with the major credit bureaus—Equifax, Experian, and TransUnion—to make it harder for anyone to open accounts in your name. Monitor your existing accounts and check your credit reports for free at AnnualCreditReport.com. If you believe your information has already been misused, visit IdentityTheft.gov for step-by-step guidance from the Federal Trade Commission.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
