State Attorneys General Allege ICE Shared Medicaid Data With Palantir in Possible Violation of Court Order

The Motion

More than 20 Democratic state attorneys general, led by California's Rob Bonta, asked a federal court on July 16, 2026 to enforce an order they say Immigration and Customs Enforcement has already broken^[1][4]. Their motion alleges that ICE passed a Medicaid dataset covering millions of people to the contractor Palantir, which runs an app called ELITE that agents use to locate addresses of noncitizens who may face deportation^[1]. The filing leans on a declaration from California deputy attorney general Anna Rich and a redacted discovery transcript that the states say shows ICE personnel asking Palantir to delete the shared file^[1].

The dispute traces back to a data-sharing arrangement the Centers for Medicare and Medicaid Services, part of the Department of Health and Human Services, entered into with the Department of Homeland Security, documented in a Federal Register notice published November 25, 2025^[5]. Democratic states sued, and in December 2025 U.S. District Judge Vince Chhabria ruled that officials could share basic biographical, address, birth-date and immigration-status information about immigrants without lawful status from the plaintiff states, while blocking the transfer of medical information^[1][7]. That ruling set the boundary the new motion says ICE crossed.

This is not, however, the first sign of trouble with that boundary. On January 7, 2026, CMS transferred a Medicaid dataset covering millions of people to ICE that went beyond what Chhabria's order permitted — a fact federal officials later acknowledged in court^[1]. After warning at an April 30, 2026 hearing that the government risked losing access to the data altogether if it could not handle it carefully, Chhabria temporarily paused CMS-ICE Medicaid data sharing in late May 2026^[1]. The Palantir allegation is a new disclosure layered on top of that already-admitted overshare, not an isolated claim arriving out of nowhere.

What Isn't in Dispute

Several facts anchor the record regardless of which side is telling the story. CMS and DHS did enter a Medicaid data-sharing arrangement for immigration enforcement purposes^[5]. More than 20 Democratic attorneys general did sue over it, and a judge did draw a line permitting basic biographical and location data while walling off medical records^[1][7]. CMS did transfer a dataset on millions of people to ICE on January 7, 2026 that exceeded what the court allowed, and the government has acknowledged as much^[1].

It's also undisputed that, when the states asked how officials confirmed contractors had deleted the data, the government's answer was that the file had been shared over a Microsoft Teams chat and later deleted from that chat^[1]. Palantir's ELITE tool does display address information ICE agents use in deportation operations^[1]. And Judge Chhabria has scheduled an August 2026 hearing specifically to clarify which categories of noncitizen data may lawfully be shared with ICE going forward^[1]. What remains legally unresolved is the question at the center of the new motion: whether the transfer to Palantir itself violated the court's order^[1].

The Pressure Underneath

Beneath the legal filings sit structural forces that would exist regardless of who occupies the White House or the state capitals involved. The administration's enforcement mandate under Executive Order 14218, "Ending Taxpayer Subsidization of Open Borders," creates institutional pressure to acquire the largest, most address-rich datasets available for locating deportable individuals — and Medicaid enrollment records are exactly that kind of dataset^[3][5].

States, meanwhile, administer Medicaid directly and carry both the political and legal responsibility for their enrollees, giving Democratic attorneys general a durable interest in controlling how that data moves that would persist under any administration^[4][6]. Palantir's business depends on expanding federal data-integration contracts, an incentive that holds whether or not this particular transfer is ultimately found improper^[1]. And underlying all of it is a technical reality neither side disputes: once a dataset is copied and distributed across systems and contractors, deletion cannot be fully verified, which is precisely why the states distrust the government's account and why the government has struggled to prove compliance^[1].

How Each Side Sees It

For the plaintiff states, this is fundamentally a rule-of-law and trust problem. If ICE cannot reliably identify which Medicaid records it holds or confirm they've been purged from a contractor's systems, the argument goes, it should not be trusted with continued access at all^[1][4]. They frame the stakes in terms of federalism and privacy — Medicaid is state-administered, and residents including U.S. citizens and lawful immigrants in mixed-status households were swept into a dataset that is now, by the government's own account, circulating beyond the limits a federal judge set^[1].

The administration counters that it has acted within its legal authority to ensure Medicaid benefits reach only those entitled to them under the law, framing data-sharing as enforcement of existing benefits and immigration statutes rather than an expansion of surveillance^[3]. DHS has described favorable court rulings as a "victory for the rule of law and American taxpayers," arguing ICE has long had a right to basic biographical and location data^[3][5]. Palantir, for its part, has presented itself as a vendor executing lawful government contracts and providing tools that act on data the government is entitled to use, while resisting characterizations that single out its government work^[1].

A fourth set of voices — Medicaid enrollees, immigrant communities, hospitals and privacy advocates — warns that routing enrollment data toward deportation efforts breaks an implicit trust that health information won't be weaponized against the people who share it, potentially deterring eligible people, including citizen children in mixed-status families, from seeking care^[6]. Health-policy analysts note that once data has been copied and passed to a contractor, it cannot truly be recalled, a concern that shapes how hospitals and states are now approaching whether to warn immigrant patients^[1][6].

How the Coverage Split

Outlets across the political spectrum covered the same set of facts through notably different lenses. NPR's headline stated as fact that ICE "shared Medicaid data it wasn't supposed to have," adopting the plaintiffs' framing before any court ruling, and led with the scale of the breach and the "millions" of records involved^[1]. KFF Health News took an analytical health-policy angle, centering the chilling effects on patients and providers rather than either party's legal arguments^[6].

Fox News, by contrast, used the more measured phrase "accused of" in its headline and gave prominent space to DHS's taxpayer-protection rationale alongside the administration's earlier favorable ruling^[2]. The Washington Examiner went further, consistently using the term "illegal immigrants" and foregrounding the administration's legal win as the central story^[3]. NBC News and CBS News landed closer to the procedural middle, with NBC specifying "basic" data in its headline and CBS using hedged language about "some" information being shared "after court ruling," without loaded modifiers favoring either side^[7][2]. Dedicated non-Western coverage of this specific filing was thin at the time of writing, with most available accounts tracing back to U.S. wire or NPR-syndicated reporting rather than distinct original framing^[1].

The question that determines who was right — whether the transfer to Palantir actually violated Judge Chhabria's order — remains before the court, with an August 2026 hearing set to address it^[1].