DPH announces data breach of 10,000 COVID-19 test results, sending letters to those impacted by incident
DOVER, Del- The Delaware Division of Public Health announced Sunday that it is mailing letters to people who were impacted by a recent data breach incident and is providing information regarding the incident.
On September 16, 2020, we are told the Department of Health and Social Services found that a DPH temporary staff member mistakenly sent two unencrypted emails, one on August 13, 2020, and one on August 20, 2020, to an unauthorized user.
They said the emails contained COVID-19 test results for approximately 10,000 people.
The Aug. 13 email included test results for individuals tested between July 16, 2020, and Aug. 10, 2020.
The Aug. 20 email included test results for individuals tested on Aug. 15, 2020.
We are told the emails were meant for internal distribution to call center staff who help people in getting their test results.
They said the emails were sent, mistakenly, to only one unauthorized user, and that person alerted the DPH of the receipt of emails. They reported deleting the emails, and the files attached to them.
We are told currently, there is no evidence to suggest that there has been any attempt to misuse any of the information.
DPH said they have reviewed and reinforced its Health Insurance Portability and Accountability Act related policies and procedures and staff were retrained in HIPAA.
DPH is also establishing a dedicated call center, separate from its COVID-19 call center, to answer any questions about this data breach.
The call center, which will be operational beginning Monday, November 16, can be reached at 1-833-791-1663 Monday through Friday, from 9:00 a.m. to 9:00 p.m.