Kentucky Measles Dashboard Vulnerability Exposed Patient Data

“Security vulnerability” on a public health dashboard made private information of a Kentucky measles patient accessible to the public in September, according to Beth Fisher, a spokesperson for the Kentucky Cabinet for Health and Family Services.

The exposure occurred on Sept. 23, WKYT reported. While the Cabinet was notified and took steps to secure the data, officials have not yet clarified the exact volume of information that was available to the public or how many individuals were affected.

The Kentucky Cabinet for Health and Family Services is currently conducting an investigation to determine the full scope of the incident. The Kentucky Lantern reported that once this review is finished, the Cabinet will issue all notifications required by both state and federal laws.

This data breach comes at a time of heightened public health concern in the state. Since the current outbreak began in western Kentucky over the summer, more than 200 measles cases have been confirmed across the commonwealth.

Kentucky Measles Dashboard Vulnerability Exposed Patient Data
Photo: wkyt.com

The scale of the current outbreak is notable when compared to recent history. At the time the security vulnerability was discovered in September, there were fewer than 100 confirmed cases in the state, the Kentucky Lantern reported.

Since that time, the number of cases has more than doubled. This surge represents the largest measles outbreak in Kentucky in 35 years.

To put the current numbers in perspective, the Centers for Disease Control and Prevention recorded 443 cases in Kentucky in 1991, a year when most infections occurred in children under the age of five.

Time Period Confirmed Measles Cases in Kentucky
1991 443
Current Outbreak (as of November 2026) Over 200

The vulnerability on the state’s disease dashboard adds a layer of privacy concern to an already pressing medical situation. Measles is a highly contagious virus that spreads through the air via coughs or sneezes.

Kentucky Measles Dashboard Vulnerability Exposed Patient Data
Photo: kentuckylantern.com

According to the CDC, a single infected person can pass the virus to nine out of ten unprotected people in their immediate vicinity. Common symptoms of the infection include fever, a runny nose, red eyes, a cough, and a rash.

Health officials emphasize that vaccination remains the most effective defense. The CDC recommends a measles vaccination series for children at 12–15 months and again at 4–6 years old.

Beth Fisher stated that Cabinet staff “took action to secure the information and prevent further public access” shortly after the vulnerability was identified.