State of Alaska Department of Health and Social Services

The Alaska Department of Health and Social Services (DHSS) reported that a portable USB hard drive possibly containing electronic protected health information (ePHI) was stolen from an employee's vehicle, affecting 501 individuals. Following the breach report on October 30, 2009, an HHS investigation found DHSS had inadequate security policies, risk management, and training. This resulted in a $1,700,000 settlement and a corrective action plan.

Affected (this filing): 501