PA Dept. of Human Services
Disclosed Jul 16, 20188 years ago2,130 affectedConfirmed
As a result of programming error, the covered entity’s (CE's) online portal exposed the electronic protected health information (PHI) of former members of individuals' households to individuals when they reviewed benefit information. The breach affected the ePHI of approximately 2,130 individuals and included names, addresses, dates of birth, and financial information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE corrected the programming error and updated its testing process to search for similar errors in the future. As a result of OCR’s investigation, the CE conducted a risk analysis and implemented a risk management plan.
What is known
| People affected | 2,130 (as reported to HHS) |
|---|---|
| Disclosed | Jul 16, 2018 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): PA Dept. of Human Services (Healthcare Provider, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 16, 2018 | 2,130 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.