US healthcare marketplaces shared citizenship and race data with ad tech giants

Nearly all 20 U.S. state healthcare marketplaces inadvertently shared sensitive personal data—including citizenship status, race, and incarceration information—with major ad tech companies through misconfigured pixel trackers, affecting over 7 million Americans and creating significant compliance and reputational risks. This incident exposes critical gaps in data governance and third-party vendor management within government IT systems, requiring urgent audits of tracking tools deployed across sensitive platforms. IT leaders must immediately assess their own healthcare and government-facing applications for similar vulnerabilities, as regulatory scrutiny and potential litigation exposure will intensify.