Over 25,000 Medicaid Client's Social Security Number Hacked from a U.S. Government Server
The social security numbers of 25, 098 individuals may have been compromised after a data breach at the Utah Department of Technology Services (DTS).
The breach on the agency's server is believed to be the work of hackers from Eastern Europe. This has resulted in the removal of personal information of over 18, 604 recipients of Medicaid, a U.S. government health care program, and Children’s Health Insurance Plan (CHIP).
Last week, the Utah Department of Health (UDOH) said that about 24, 000 claims were affected by the breach on the claims data server. After an investigation, the DTS found that the hackers removed 24, 000 files which “potentially” contain information, which could include Social Security numbers or tax identification number, on claims made by hundreds of individuals.
The hackers were able to by-pass the security system by exploiting a configuration error at the authentication level. The breached server has since been shut down, while the agency had also installed new security measures. The claims record had also been transferred to a new server.
“We understand clients are worried about who may have accessed their personal information, and that many of them feel violated by having their information compromised,” UDOH Deputy Director Michael Hales said in a statement.
“But we also hope they understand we are doing everything we can to protect them from further harm."
The agency has reached out to clients whose personal information was hacked and stolen, giving priority to those whose Social Security numbers were compromised. It is also coopertating with law enforcement in a criminal investigation.
Those who think they are affected by the breach can call the Health Department's hotline at 800-662-9651 or go to a dedicated Web site for more information.