dds

DDS issued a release today in which it is alerting the public of a break in at their office in Sacramento.  Please click on the link for information.  Please direct all questions to the DDS call center as indicated in the letter.

 

DDS Data Breach Information 

 

Letter:

April 6, 2018                 Notice of Breach of Protected Health Information

 

 

The Department of Developmental Services (Department) is writing to inform you about an incident that happened at the Department’s legal and audits offices in Sacramento.  As explained in this letter, unknown persons broke into the offices, and had access to your personal health information.  We have no evidence to believe those who broke in actually stole your information or can use any stolen information to harm you.  In the abundance of caution, we are providing you this notice so you are aware of what happened, and can take steps to monitor any unusual activity regarding your personal health information.

 

What Happened:  On Sunday, February 11, 2018, unknown persons broke into the Department’s legal and audits offices, ransacked the offices and paper files, vandalized property, and started a fire.  The fire set-off the building’s sprinklers, which caused water damage to many documents and computer workstations.  Law enforcement is investigating the incident.

 

After the break-in, the Department discovered a number of paper documents and compact discs (CDs) were either displaced or damaged from the fire and the sprinklers.  Some of these paper documents and CDs included protected health information (PHI).  Twelve state-owned laptop computers were also stolen, but the data on these computers cannot be accessed because they were encrypted to meet the highest federal security standards.  The Department’s review of its computer system confirmed the network was not accessed.  All electronic files remain protected.

 

Please note, the Department is not aware of any evidence the PHI on the documents or CDs located in the offices were taken or viewed by the thieves, or that the PHI on those documents or CDs was compromised in any way.

 

What Information Was Involved:  The fire and water damage to some papers, the existence of CDs, combined with the required cleanup, makes it impossible for the Department to identify with certainty whose PHI may have been compromised.  Because we do not know for sure whether your PHI was improperly viewed or accessed during the break-in, we are sending you this notice.

 

The information contained in paper files and CDs included PHI and other information such as: (1) names; (2) unique state-issued client identifier numbers; (3) service codes; (4) units billed; (5) service dates; (6) amounts paid for services; and/or (7) medical records.

 

What We Are Doing:  After discovering the break-in, the Department immediately launched an internal investigation, analyzed the electronic network to confirm that no unauthorized individuals accessed the network, hired outside experts to guide the Department’s thorough response, and requested a state administrative investigation.  The Department also continues to work with the law enforcement agency investigating the break-in.

 

The Department has identified, and is notifying, all individuals whose PHI may have been compromised, which is why you are receiving this letter.  We are committed to protecting individuals’ privacy.  The Department will enhance building security safeguards and our procedures and practices, and will work towards reducing any potential risks arising from this incident and preventing any future incidents.

 

What You Can Do:  Please keep a copy of this notice for your records for future reference in case you become aware of any unusual activity involving your confidential information.

 

You may place a fraud alert on your credit files by following the recommended privacy protection steps outlined in the Breach Help – Consumer Tips from the California Attorney General.  It can be found athttps://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/cis-17-breach-help.pdf.  You may also contact the three credit bureaus directly:

Experian               (888) 397-3742

Equifax                 (800) 525-6285

TransUnion          (800) 680-7289

 

Other Important Information:  For information about your medical privacy rights, you may visit the website of the California Department of Justice, Privacy Enforcement and Protection at https://oag.ca.gov/privacy/medical-privacy.

 

For More Information:  If you have additional questions about this breach, please contact the Department’s call center Monday through Friday from 6:00 a.m. to 6:00 p.m., or Saturday and Sunday from 8:00 a.m. to 5:00 p.m., Pacific Time, at (877) 790-8160 or visit http://www.dds.ca.gov/SecurityNotice.  The Department’s website will have this notice and other important information available to you in several different languages.  You may also e-mail us with questions at SecurityBreachQuestions@dds.ca.gov.  Please do not include your social security number or medical information in an e-mail to the Department.

 

I understand how important your health information is to you, and sincerely apologize for any inconvenience this incident may cause you.

 

Sincerely,

” src=”cid:image004.png@01D3CDB0.6AE3D290″ alt=”image004.png” width=”95″ border=”0″ class=”Apple-web-attachment Singleton”>

NANCY BARGMANN

Director