The covered entity (CE), State of New Jersey Department of Human Services, Division of Medical Assistance and Health Service, reported that a data security incident exposed the protected health information (PHI) of 552 individuals on the Internet. The PHI involved included names, addresses, dates of birth, Social Security numbers, and financial information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect PHI.