The Human Development Center in Duluth says a data breach occurred in January, possibly exposing personal data of clients.
According to HDC, during a routine review of email logs on Jan. 25, it was determined that an employee’s email account was compromised and accessed by individuals outside HDC on Jan. 16 and Jan. 18.
Upon review of the information within the email account, protected health information consisting of client names, date of birth, internal HDC client numbers, internal HDC description of services and a limited number of procedure codes were found.
HDC said it believes the likelihood the information was accessed or downloaded within the emails was low. Letters were mailed to affected individuals with information regarding the data breach. Clients impacted by the data breach were seen at HDC in Duluth between 2011 and 2018.
HDC said it has investigated how the breach happened and has taken key steps to help manage inappropriate cybersecurity attacks in the future. Anyone with questions regarding the data breach can call 1-833-201-4088.
