MILWAUKEE, Wis. – A Milwaukee company that facilitates care packages for inmates held at Wisconsin Department of Corrections facilities says a privacy breach involving the protected health information was linked to their website.
Between August 15th, 2024, and May 16th, 2025, people placing orders for persons in DOC care through Jack L. Marcus incorporated were able to view the name of the treatment facility of certain inmates during the checkout process.
Vice President of Operations Eric Lutzen tells WTMJ a total of 705 inmates were impacted at six DOC facilities, including Black River, Flambeau, the Wisconsin Drug Abuse Correctional Center, St. Croix, Chippewa Valley, and the Wisconsin Resource Center.
“Our ​website ​censored ​the ​address ​of ​the ​location, ​but ​it ​mistakenly ​allowed ​the ​name ​of ​the ​treatment ​center ​to ​be visible,” says Lutzen.
The breach was discovered by a contact at the Department of Corrections on May 15th, and Lutzen says the issue was corrected within 24 hours.
No medical records, financial data, Social Security numbers, or other sensitive health information was involved.
Letters have been mailed to all affected individuals using addresses provided by the Wisconsin Department of Corrections.
TOP STORIES FROM THE WTMJ NEWSROOM:
- Suspect accused of shooting 2 Minnesota lawmakers arrested
- Democratic Party of Wisconsin elects new leader
- Germantown stabbing suspect arrested after police chase in Indiana
- Plymouth firefighters briefly trapped during fire at Millenium Technologies
- Brewers take three of four from the Cardinals with a 3-2 win
