(MILWAUKEE) A Milwaukee company that facilitates care packages for inmates held at Wisconsin Department of Corrections facilities says a privacy breach involving the protected health information was linked to their website.
Between August 15th, 2024, and May 16th, 2025, people placing orders for persons in DOC care through Jack L. Marcus incorporated were able to view the name of the treatment facility of certain inmates during the checkout process.
Vice President of Operations Eric Lutzen tells 620 WTMJ a total of 705 inmates were impacted at six DOC facilities, including Black River, Flambeau, the Wisconsin Drug Abuse Correctional Center, St. Croix, Chippewa Valley, and the Wisconsin Resource Center. The breach did not impact inmates at Waupun Correctional.
“Our website censored the address of the location, but it mistakenly allowed the name of the treatment center to be visible,” says Lutzen.
The breach was discovered by a contact at the Department of Corrections on May 15, and Lutzen says the issue was corrected within 24 hours.
No medical records, financial data, Social Security numbers, or other sensitive health information was involved.
Letters have been mailed to all affected individuals using addresses provided by the Wisconsin Department of Corrections.
