Klamath County data breach

Stock photo

Klamath County Developmental Disability Services notified individuals of a breach of unsecured personal information

KLAMATH FALLS, Ore. - Klamath County Developmental Disability Services (KCDDS) notified 547 individuals of a breach of unsecured personal patient-protected health information after discovering the event on October 21.

In October, it was brought to the attention of the Klamath County Information Technology Department, that a data set was inappropriately emailed to an email address that should not have received the records.  

The information that was involved included individual names, date of birth, address, and Medicaid numbers.  

Klamath County performed a full investigation and has been taking necessary steps to ensure that the data has not been used in a manner that is unintended.  At this time, there is no known damage from this breach.  

Steps were taken to mitigate this breach, including a request for the information to be deleted from the recipient’s email server.  

In a press release, KCDDS stated, “KCDDS has notified impacted individuals to mitigate the damages of the breach.  KCDDS has in place safeguards to ensure the privacy and security of all protected health information.  As a result of this breach, steps are underway to further improve the security of its operations and eliminate future risk.  The employee of the source of this breach is no longer employed with Klamath County.”

In a notification to individuals, KCDDS has offered its resources as well as the following recommendations:

Additionally, KCDDS stated, “KCDDS understands the importance of safeguarding individual personal information and takes that responsibility very seriously.”