{"id":3509,"date":"2019-07-25T15:10:00","date_gmt":"2019-07-25T15:10:00","guid":{"rendered":"https:\/\/dbhids.org\/dev\/?post_type=news&#038;p=3509"},"modified":"2022-12-07T15:11:10","modified_gmt":"2022-12-07T15:11:10","slug":"hipaa-breach-discovered-at-the-philadelpha-dbhids","status":"publish","type":"news","link":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/","title":{"rendered":"HIPAA breach discovered at the Philadelpha DBHIDS"},"content":{"rendered":"\n<p>July 25, 2019<\/p>\n\n\n\n<p>The Department of Behavioral Health and Intellectual disAbility Services announced today that close to 1500 of its clients are being notified of a privacy breach. It occurred in the Division of Intellectual disAbility Services (\u201cIDS\u201d), within DBHIDS. This division coordinates and administers services for 15,487 individuals with intellectual disabilities in Philadelphia, including home and community habilitation, adaptive equipment, behavior and other therapies, and residential, respite, employment, and day services.<\/p>\n\n\n\n<p>On May 24, 2019, DBHIDS learned that an IDS employee lost a briefcase on public transit earlier that day, which contained a laptop that was password protected but not encrypted. Although police and public transit customer service were immediately contacted, DBHIDS was not able to recover the laptop. To determine the scope of information that may have been compromised, DBHIDS and the City\u2019s Information Security Group conducted a forensic review. The review confirmed that, after the laptop was lost, there was no unauthorized access to DBHIDS client records stored in secure web-based systems. Most of the work performed on this laptop was saved in those secure systems; however, forensic review identified additional files that were likely saved on the laptop\u2019s hard drive, such as backup copies of status reports and internal tracking spreadsheets. The files contained personal information of 1,458 IDS clients, including: name, date of birth, MCI number (a unique client identifier for PA-DHS social services benefits), service provider name, and information about Medicaid waiver services the client applied for or was receiving. The data did NOT contain social security or credit\/bank account numbers.<\/p>\n\n\n\n<p>\u201cWe take our obligation to protect the privacy of the people that we serve very seriously,\u201d said David T. Jones, Commissioner of the Department of Behavioral Health and Intellectual disAbility Services. \u201cOnce we learned about the lost laptop within our Intellectual disAbility division, we immediately implemented actions to inform anyone who may have been impacted, provided additional training to our workforce and implemented additional controls to prevent this type of incident from occurring in the future. We deeply regret and apologize for any concern or inconvenience this situation may cause to the people and families that we serve.\u201d<\/p>\n\n\n\n<p>DBHIDS has not received information indicating that any client\u2019s data has been viewed or misused in any way. However, since DBHIDS has been unable to rule out the possibility that data was accessible to unauthorized persons after the laptop was lost, DBHIDS is notifying all clients whose information could have been saved on the laptop. DBHIDS encourages all individuals to routinely remain vigilant against incidents of identity theft and fraud by regularly reviewing bank account and credit card statements and monitoring health insurance explanation of benefits forms for suspicious activity. As an extra precaution, DBHIDS is providing one year of complimentary credit monitoring and identity protection services to affected clients.<\/p>\n\n\n\n<p>As a result of this incident, DBHIDS has taken corrective actions including ensuring that all laptops currently in use by DBHIDS are encrypted, providing additional training to its workforce, and continuing to review its practices and implement additional controls to prevent this type of incident from occurring in the future.<\/p>\n\n\n\n<p>DBHIDS clients with questions or concerns can call its toll-free call center at 888-884-0180.<\/p>\n\n\n\n<p><strong>David T. Jones<\/strong><br>Commissioner<\/p>\n\n\n\n<p><strong>Jill Bowen, Ph.D.<\/strong><br>Deputy Commissioner<\/p>\n\n\n\n<p><strong>Roland Lamb<\/strong><br>Deputy Commissioner<\/p>\n","protected":false},"excerpt":{"rendered":"<p>July 25, 2019 The Department of Behavioral Health and Intellectual disAbility Services announced today that close to 1500 of its clients are being notified of a privacy breach. It occurred [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"tags":[102,70,42,144,143],"news-category":[],"class_list":["post-3509","news","type-news","status-publish","hentry","tag-city-of-philadelphia","tag-commissioner-bowen","tag-dbhids","tag-phishing","tag-security-breach"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>HIPAA breach discovered at the Philadelpha DBHIDS - DBHIDS<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HIPAA breach discovered at the Philadelpha DBHIDS\" \/>\n<meta property=\"og:description\" content=\"July 25, 2019 The Department of Behavioral Health and Intellectual disAbility Services announced today that close to 1500 of its clients are being notified of a privacy breach. It occurred [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/\" \/>\n<meta property=\"og:site_name\" content=\"DBHIDS\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DBHIDS\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-07T15:11:10+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@dbhids\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/\",\"url\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/\",\"name\":\"HIPAA breach discovered at the Philadelpha DBHIDS - DBHIDS\",\"isPartOf\":{\"@id\":\"https:\/\/dbhids.org\/dev\/#website\"},\"datePublished\":\"2019-07-25T15:10:00+00:00\",\"dateModified\":\"2022-12-07T15:11:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dbhids.org\/dev\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"News\",\"item\":\"https:\/\/dbhids.org\/dev\/news\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"HIPAA breach discovered at the Philadelpha DBHIDS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dbhids.org\/dev\/#website\",\"url\":\"https:\/\/dbhids.org\/dev\/\",\"name\":\"DBHIDS\",\"description\":\"The mission of the Department of Behavioral Health and Intellectual disAbility Services is to educate, strengthen, and serve individuals and communities so that all Philadelphians can thrive.\",\"publisher\":{\"@id\":\"https:\/\/dbhids.org\/dev\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dbhids.org\/dev\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/dbhids.org\/dev\/#organization\",\"name\":\"Department of Behavioral Health and Intellectual disAbility Services\",\"url\":\"https:\/\/dbhids.org\/dev\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png\",\"contentUrl\":\"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png\",\"width\":211,\"height\":55,\"caption\":\"Department of Behavioral Health and Intellectual disAbility Services\"},\"image\":{\"@id\":\"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DBHIDS\",\"https:\/\/x.com\/dbhids\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"HIPAA breach discovered at the Philadelpha DBHIDS - DBHIDS","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"HIPAA breach discovered at the Philadelpha DBHIDS","og_description":"July 25, 2019 The Department of Behavioral Health and Intellectual disAbility Services announced today that close to 1500 of its clients are being notified of a privacy breach. It occurred [&hellip;]","og_url":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/","og_site_name":"DBHIDS","article_publisher":"https:\/\/www.facebook.com\/DBHIDS","article_modified_time":"2022-12-07T15:11:10+00:00","twitter_card":"summary_large_image","twitter_site":"@dbhids","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/","url":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/","name":"HIPAA breach discovered at the Philadelpha DBHIDS - DBHIDS","isPartOf":{"@id":"https:\/\/dbhids.org\/dev\/#website"},"datePublished":"2019-07-25T15:10:00+00:00","dateModified":"2022-12-07T15:11:10+00:00","breadcrumb":{"@id":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-discovered-at-the-philadelpha-dbhids\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dbhids.org\/dev\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/dbhids.org\/dev\/news\/"},{"@type":"ListItem","position":3,"name":"HIPAA breach discovered at the Philadelpha DBHIDS"}]},{"@type":"WebSite","@id":"https:\/\/dbhids.org\/dev\/#website","url":"https:\/\/dbhids.org\/dev\/","name":"DBHIDS","description":"The mission of the Department of Behavioral Health and Intellectual disAbility Services is to educate, strengthen, and serve individuals and communities so that all Philadelphians can thrive.","publisher":{"@id":"https:\/\/dbhids.org\/dev\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dbhids.org\/dev\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/dbhids.org\/dev\/#organization","name":"Department of Behavioral Health and Intellectual disAbility Services","url":"https:\/\/dbhids.org\/dev\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/","url":"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png","contentUrl":"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png","width":211,"height":55,"caption":"Department of Behavioral Health and Intellectual disAbility Services"},"image":{"@id":"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DBHIDS","https:\/\/x.com\/dbhids"]}]}},"_links":{"self":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news\/3509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news"}],"about":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/types\/news"}],"author":[{"embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/comments?post=3509"}],"version-history":[{"count":1,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news\/3509\/revisions"}],"predecessor-version":[{"id":3510,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news\/3509\/revisions\/3510"}],"wp:attachment":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/media?parent=3509"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/tags?post=3509"},{"taxonomy":"news-category","embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news-category?post=3509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}