Patient Names, Medical Data May Have Been Released from CDPH Online Dashboard
Inadvertent Disclosure of Sensitive Information
The Chicago Department of Public Health (CDPH) has announced that some individuals’ private medical information may have been exposed on one of its online dashboards. The incident occurred on October 8, 2022, when CDPH was made aware of an “inadvertent potential disclosure of sensitive information used to generate statistics related to public health and safety.”
Investigation and Findings
An investigation was conducted to determine the extent of the breach. It was found that a visitor could access personal data on the dashboard if they took “certain steps” while reviewing the statistical information. The types of information that may have been present on the impacted systems include a combination of certain individuals’ names and medical information.
Lack of Details and Mitigation Measures
CDPH has not disclosed the number of individuals whose information may have been exposed, nor has it provided further details on the type of dashboard involved. However, the agency has reviewed its policies and procedures to “reduce the risk of a similar event from occurring in the future.” All potential public access to the data has been disabled, and the agency is unaware of any actual or attempted misuse of the data.
Credit Monitoring Services Offered
CDPH is offering a year of complimentary access to credit monitoring services through IDX, a ZeroFox company, to individuals who may have been affected. Those interested in signing up for the credit monitoring service can call (877) 741-1109.
Conclusion
The incident serves as a reminder of the importance of protecting sensitive information and the potential risks involved in sharing personal data online. It is essential for individuals to be vigilant and take steps to protect their personal information, including being cautious when sharing sensitive data online and monitoring their credit reports regularly.
FAQs
* What information may have been exposed?
A combination of certain individuals’ names and medical information.
* How many individuals may have been affected?
The exact number is unknown.
* Has there been any actual or attempted misuse of the data?
No, CDPH is unaware of any actual or attempted misuse of the data.
* What measures have been taken to prevent similar incidents in the future?
CDPH has reviewed its policies and procedures to reduce the risk of a similar event from occurring in the future.
* What credit monitoring services are being offered?
A year of complimentary access to credit monitoring services through IDX, a ZeroFox company, is being offered to individuals who may have been affected.
