Minnesota Department of Human Services

The Minnesota Department of Human Services reported that an employee inadvertently emailed billing statements containing the protected health information (PHI) of 4,307 individuals to an unauthorized recipient. The PHI included names, addresses, claims information, and financial data. In response, the entity implemented additional safeguards and retrained its staff.

Minnesota Department of Human Services (covered entity) reported that an employee fell victim to an email phishing scheme, exposing PHI of 10,263 individuals. PHI included names, dates of birth, addresses, Social Security numbers, prescribed medications, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media; implemented additional security, technical, and administrative safeguards; and retrained staff. OCR obtained assurances that corrective actions were implemented.

Minnesota Department of Human Services (MN, Health Plan) reported to HHS on 2018-10-09 a Hacking/IT Incident affecting 20,800 individuals. Several employees were victims of a series of email phishing schemes. PHI involved included names, dates of birth, addresses, Social Security numbers, medications prescribed, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media, and subsequently implemented additional security safeguards and retrained staff. OCR obtained assurances of corrective actions. Breached information located on Email.