Missouri Dept. of Mental Health

The Missouri Department of Mental Health reported that a former contractor of its business associate placed private client data in an unsecured cloud storage portal. The breach occurred between March 17, 2018, and August 31, 2018, affecting approximately 9,000 individuals. In response, the department confirmed the data was removed from the portal and obtained written verification that the data was destroyed or returned. The Office for Civil Rights (OCR) provided technical assistance to the department regarding security risk analysis and management.

Affected (this filing): 9,000