Millions of Medicaid records illegally handed to Palantir via ICE, court filing shows

For healthcare organizations and policymakers, the revelation that protected health information from Medicaid was funneled to a tech firm for immigration surveillance is a nightmare scenario. The breach erodes patient trust exactly when public health outreach is most critical, and it raises urgent questions about the adequacy of HIPAA safeguards when agencies share data for non-treatment purposes.

A federal court filing by over 20 Democratic attorneys general has revealed that Immigration and Customs Enforcement (ICE) improperly shared sensitive Medicaid data with Palantir Technologies, the data analytics firm operating the ELITE app for immigration enforcement. This disclosure, made on July 16, 2026, exposes a multi-layered failure in government data governance: the Centers for Medicare and Medicaid Services (CMS) first violated a court order by illegally transferring address, birth date, and immigration status records on millions of people—including U.S. citizens and legal residents—to ICE in January 2026. ICE then handed that data to Palantir, a publicly traded company (NYSE: PLTR), which uses it in an app that identifies locations of noncitizens subject to deportation.

“

District Judge Vince Chhabria allowed limited data sharing between CMS and ICE, restricted to immigrants without lawful status from the states that had sued.

The chain of events began in December 2025, when U.S. District Judge Vince Chhabria allowed limited data sharing between CMS and ICE, restricted to immigrants without lawful status from the states that had sued. That narrow permission was intended to support enforcement while protecting privacy. However, on January 7, 2026, CMS transferred a dataset containing millions of records far beyond this scope, including a file on Minnesota refugees that contained U.S. citizens. After the unauthorized transfers were discovered, Judge Chhabria in late May temporarily halted all data sharing for immigration purposes, demanding that ICE delete the improperly obtained data.

Instead of deletion, ICE shared the data with Palantir, a company whose ELITE application is embedded in ICE operations. Palantir’s involvement introduces alarming dimensions. As a government contractor, it is entrusted with vast datasets yet operates under commercial secrecy. Its stock has faced volatility over privacy controversies, and this revelation could reignite shareholder and regulatory pressures. The fact that personal health data—protected under HIPAA from disclosure without consent—flowed from a healthcare agency to a for-profit surveillance contractor without any public knowledge until court intervention demonstrates a systemic breach of medical privacy law and ethical norms.

The implications are severe. For millions of Medicaid enrollees, especially in immigrant communities, the breach may deter them from seeking healthcare, fearing that their information could be weaponized for deportation. Public health suffers when vulnerable populations avoid coverage. From a technology perspective, the incident underscores the ease with which large administrative datasets can be misused, highlighting the need for ironclad access controls, audit trails, and mandatory breach notifications.