Nearly 400,000 Medicaid Beneficiaries Caught in Medicaid and DC Healthcare Alliance Data Exposure
2026-09-28T14:51:36Z•b2888d0d2b44719ba2f2809594aa4ba09764b56c1aee813ebca5d0d71446cd7d
CVE-2026-48842CVE-2026-88771AI securityAzureCISA KEVCVE exploitationCitrix NetScalerJADEPUFFERMedicaidRoundcubeSQL injectionStorm-3168cloud securitycybercrimedata exposurehealthcaremalwarepersonally identifiable informationransomwareremote code executionstolen identitieszero-day
What happened
Security Affairs RSS feed covering a major healthcare data exposure affecting nearly 400,000 DC Medicaid and Healthcare Alliance beneficiaries, cloud identity abuse and destructive Azure activity attributed to Storm-3168/JADEPUFFER, exploitation of Citrix NetScaler zero-days and KEV-listed flaws, in-the-wild exploitation of Roundcube SQL injection CVE-2026-48842, cybercrime marketplaces, malware, and unauthorized AI-agent activity.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- b2888d0d2b44719ba2f2809594aa4ba09764b56c1aee813ebca5d0d71446cd7d
- Enrichment time
- 2026-09-28T14:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.