State of Alaska Department of Health and Social Services

State of Alaska Department of Health and Social Services reported to HHS on 2018-06-28 a Hacking/IT Incident affecting 942,528 individuals. Breached information located on Desktop Computer, Email. The incident involved ransomware encryption and data exfiltration of ePHI including names, SSNs, and health insurance data. FBI assisted in the investigation.

State of Alaska Department of Health and Social Services reported to HHS on 2017-09-01 a Hacking/IT Incident (Trojan malware) affecting 501 individuals. A Trojan virus infected two desktop computers in the Office of Children's Services (OCS) in St. Mary's, AK, after an employee allowed a family member to access gaming websites. Demographic, clinical, and financial PHI of 500+ individuals may have been exposed. CE notified HHS, media, and individuals; implemented layered security, revised policies, sanctioned employee, and retrained staff.

The Alaska Department of Health and Social Services (DHSS) reported that a portable USB hard drive possibly containing electronic protected health information (ePHI) was stolen from an employee's vehicle, affecting 501 individuals. Following the breach report on October 30, 2009, an HHS investigation found DHSS had inadequate security policies, risk management, and training. This resulted in a $1,700,000 settlement and a corrective action plan.