
A coalition of 20 U.S. states has sued the Trump administration over allegations that Medicaid recipient data was secretly funneled to immigration authorities, sparking fears of surveillance, deterrence, and mass rights violations.
At a Glance
- Twenty states allege HHS unlawfully shared Medicaid recipients’ personal data with DHS.
- Information included names, addresses, Social Security numbers, immigration status, and health claims.
- Connecticut’s Attorney General says nearly 1 million state residents may have been affected.
- The lawsuit claims violations of HIPAA, the Privacy Act, and the Social Security Act.
- Plaintiffs demand an immediate injunction to halt future data transfers.
HIPAA Breach or Immigration Blitz?
The lawsuit, filed in federal court this week, claims the Department of Health and Human Services (HHS) under President Trump transferred extensive Medicaid enrollee data—including immigration status and health records—to the Department of Homeland Security (DHS) without legal authorization. Connecticut Attorney General William Tong, who joined the 20-state effort, alleges the breach began in June and could affect nearly 1 million Connecticut residents alone, including vulnerable groups relying on emergency Medicaid.
According to Politico, the coalition argues that the data transfers directly violate privacy safeguards under HIPAA and the Social Security Act. Officials warn that even legal immigrants might now avoid critical care out of fear their information will be used for deportation.
Watch a report: States sue over Medicaid–immigration data transfer
Weaponized Health Records?
The plaintiffs—including California, Illinois, Washington, and New York—say the data was rerouted to DHS under a thin pretense of interagency cooperation. In reality, they claim, it enabled targeted immigration enforcement against individuals who sought medical help through federally funded programs. As CT Insider reports, Tong denounced the move as an “anti-immigrant campaign” disguised as administrative coordination.
The lawsuit doesn’t just challenge a technical breach—it paints a picture of bureaucratic betrayal. In immigrant communities already facing renewed ICE raids and Trump-era enforcement tactics, the idea that medical forms might double as deportation lists marks a chilling new frontier in surveillance and control.