PAHHS OCRFirst filing
Filed Jul 16, 2018bd_1e45a1c42fe89f7a
PA Dept. of Human Services (Pennsylvania DHS) reported to HHS OCR on 2018-07-16 an Unauthorized Access/Disclosure affecting 2,130 individuals. A programming error in the CE's online portal inadvertently exposed ePHI — including names, addresses, dates of birth, and financial information — of former household members to current users reviewing benefit information. The CE corrected the error, improved testing processes, and, following OCR investigation, completed a risk analysis and risk management plan. Breached information located on: Other.
Affected (this filing): 2,130
HHS notified