Delaware Department of Health and Social Services, Division of Developmental Disabilities Services

The covered entity (CE), Delaware Department of Health and Social Services, Division of Developmental Disabilities Services, reported that employees impermissibly provided access to the protected health information (PHI) of 7,000 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional technical safeguards and provided additional training to its workforce.