Public Partnerships, the fiscal intermediary for New York’s Consumer Directed Personal Assistance Program, became aware on June 8, 2026, of an allegation that a former network facilitator may have offered participant data to another contracted facilitator. The recipient reportedly refused the offer and notified Public Partnerships. The company disclosed the incident on August 7, 2026, and reported it to HHS’s Office for Civil Rights. The New York State Department of Health referred the matter to the New York Attorney General for investigation and enforcement.
The reported information potentially involved 12,018 New York residents and included names, addresses, dates of birth, Medicaid ID numbers, PPL ID numbers, and New York Medicaid enrollment status. Public Partnerships’ investigation had found no evidence that the data was transmitted, sold, or otherwise misused. The source does not report exposure of Social Security numbers, financial account information, or clinical records.
The incident report was updated September 26, 2026. It does not give exact dates for regulator notification or consumer notifications; it says consumer notifications began around the August 7 disclosure. Whether any data was transferred remains unclear.