Healthcare Data Breach: Personal Details Harvested by Tech Giants
TL/DR –
Almost every state-run health insurance marketplace in the United States shared sensitive information such as citizenship status, race, and prescription details with tech giants like Google, LinkedIn, TikTok, and Meta through invisible tracking code, affecting over 7 million Americans. Pixel trackers, typically used for e-commerce analytics, were embedded in state exchanges, unintentionally collecting and transmitting this data. The breach raises significant privacy concerns, potentially leading to discrimination or targeted manipulation by insurance companies, employers, and advertisers, and eroding trust in public services.
Your Privacy Compromised: Meta’s Advertising Database Storing Sensitive Data
Data including your citizenship status, race, and prescription details have unexpectedly landed in Meta’s advertising database. Almost all American state-run health insurance marketplaces have shared this sensitive information with tech giants like Google, LinkedIn, and TikTok, claims a Bloomberg investigation.
The Breach’s Scope
More than 7 million Americans who purchased insurance via state exchanges this year had delicate details harvested by ad companies. Information about applicants with incarcerated family members was shared by New York’s exchange while D.C.’s site shared race, sex, and contact information directly to TikTok’s pixel tracker. What’s more, Nevada’s marketplace leaked prescription names and dosages to LinkedIn and Snapchat.
State Responses Post-Exposure
- Virginia removed its Meta tracker after it gave away residents’ ZIP codes
- D.C. suspended its TikTok integration
- Maine’s CoverME.gov and Rhode Island’s HealthSource RI transferred prescription details and doctors’ names to Google’s tracking system
- Massachusetts Health Connector may have shared data through LinkedIn’s pixel, but a spokesperson denied this, stating “personally identifiable information is not part of the tool’s structure”
The Technical Breach: Pixel Trackers
Pixel trackers, designed for shopping sites to collect data, were found to be collecting government healthcare enrollment data. These invisible tracking codes were used unknowingly by state exchanges, capturing sensitive information.
Healthcare Data: A Unique Risk
Your healthcare data carries unique risks beyond regular privacy violations. This information can potentially be used for discrimination or targeted manipulation by insurance companies, employers and advertisers. When this data leaks from government sites, supposedly the most secure digital spaces, to advertising networks, it results in erosion of trust in vital public services.
The impact extends beyond individual privacy. If residents can’t trust platforms with their citizenship status or prescription details, they might avoid enrollment entirely. This threatens the entire healthcare system that these sites are meant to support.
—
Read More Health & Wellness News ; US News