Power Grab/Fire anyone who can stop him
CMS gives ICE access to the personal data of about 79 million Medicaid enrollees, and a judge later limits it
A judge first enjoined immigration use of about 20 states’ data, then allowed basic biographical data on people not lawfully present, then barred data on citizens and mass sharing.
What happened
In June 2025, the Centers for Medicare and Medicaid Services began transferring Medicaid enrollee files to the Department of Homeland Security. A July 9, 2025 agreement between CMS and ICE gave ICE access to data on roughly 79 million enrollees, including addresses and Social Security numbers. The stated purpose was to help ICE locate people subject to removal.
About 20 states sued. On August 12, 2025, Judge Vince Chhabria enjoined immigration use of their data. On December 29 he allowed basic biographical data on people not lawfully present from January 2026, while barring health data.
Filings later showed that CMS sent ICE data on millions of people, including citizens, in January 2026. The judge paused sharing in May. On September 8, 2026, he barred data on citizens, permanent residents and valid visa holders, and any mass sharing.
Who benefited
ICE gained a nationwide address and identity file far larger than any immigration database, built from a health program. The data gave ICE a way to find people who had enrolled in coverage, including in states that cover immigrants with their own funds.
Who wanted something
The transfer was arranged between CMS leadership under HHS and DHS under Secretary Kristi Noem. It was part of the administration’s push to combine federal records for immigration enforcement. The White House has publicly promoted claims that noncitizens receive Medicaid.
Who lost out
Roughly 79 million Medicaid enrollees, the overwhelming majority of them citizens, had health-program records repurposed for law enforcement. Immigrant families in states that cover them were exposed to enforcement for having sought care. The January 2026 transfer included data on citizens.
Why it matters
Medicaid data was collected for medical coverage under privacy rules written for that purpose. Routing it to deportation officers turned a social program into a source for enforcement. The judge’s September 2026 order came after data on citizens had already gone to ICE.
Sources Associated Press (via WTTW)U.S. District Court, N.D. Cal. (via CourtListener) (primary)NPRU.S. District Court, N.D. Cal. (via CourtListener) (primary)