State of New Hampshire, Department of Health and Human Services

New Hampshire DHHS notified 9 individuals of a misdelivery of a spreadsheet containing personal identifying information. The error occurred when the Strafford County Employability Program sent a document to the Department, which was then inadvertently included with a payment receipt. The recipient returned the document.

NH DHHS notified the AG of a security breach where a staff member's PII (name, address, bank info) was disclosed via email fraud on March 20-21, 2019. The fraud was detected on April 5, 2019. One employee affected.

NH DHHS Bureau of Child Support Services notified AG of security breach on Oct 25, 2018. Personal info (names, SSNs) of 2 individuals (NH and UT residents) was mistakenly included in documents filed for a Circuit Court case. Notification sent Jan 16, 2019. Remediation includes staff training.

New Hampshire DHHS notified the AG of a security breach on Oct 30, 2017, regarding unauthorized access by an internal employee on Sept 8, 2017. Three NH residents' PII (names, addresses, DOBs, SSNs) was accessed. The employee was addressed and policies reviewed.

State of New Hampshire, Department of Health and Human Services reported to HHS on 2016-12-30 a Hacking/IT Incident affecting 14,947 individuals. A former patient accessed ePHI stored on a Desktop Computer. Data exposed included names, dates of birth, addresses, email addresses, Social Security numbers, and health insurance information. The CE notified HHS, affected individuals, and the media, and updated its policies and procedures to better protect ePHI.

New Hampshire DHHS notified over 1,000 individuals that their PHI and PII (including SSN, DOB, Medicaid ID) were accessed by an unauthorized individual who posted data to social media. Discovered Nov 4, 2016. Law enforcement involved; data removed within 24 hours. No credit card info accessed.