ISDH reports data was ‘improperly accessed’

0

The Indiana State Dept. of Health is notifying nearly 750,000 Hoosiers that data from the state’s COVID-19 online contact tracing survey was improperly accessed. The data included names, addresses, emails, dates of birth and gender and ethnicity/race data.

The state was notified of the unauthorized access on July 2. Last week, the state and the company that accessed the data signed a “certificate of destruction” to confirm that the data was not released to any other entity and was destroyed by the company.

When the state was notified of the unauthorized access, the Indiana Office of Technology and ISDH immediately corrected a software configuration issue and requested the records that had been accessed. Those records were returned on Aug. 4.

“We believe the risk to Hoosiers whose information was accessed is low,” State Health Commissioner Dr. Kristina Box said. “We do not collect Social Security information as a part of our contact tracing program, and no medical information was obtained. We will provide appropriate protections for anyone impacted.”

The ISDH will send letters to affected Hoosiers to notify them that the state will provide one year of free credit monitoring and is partnering with Experian to open a call center to answer questions from those impacted. In addition, the Indiana Office of Technology will continue its regular scans to ensure information was not transferred to another party.

“We take the security and integrity of our data very seriously,” said Tracy Barnes, chief information officer for the state. “The company that accessed the data is one that intentionally looks for software vulnerabilities, then reaches out to seek business. We have corrected the software configuration and will aggressively follow up to ensure no records were transferred.”


Current Morning Briefing Logo

Stay CURRENT with our daily newsletter (M-F) and breaking news alerts delivered to your inbox for free!

Select list(s) to subscribe to



By submitting this form, you are consenting to receive marketing emails from: Current Publishing, 30 S. Range Line Road, Carmel, IN, 46032, https://www.youarecurrent.com. You can revoke your consent to receive emails at any time by using the SafeUnsubscribe® link, found at the bottom of every email. Emails are serviced by Constant Contact
Share.