For Immediate Release: July 2, 2019
Contact: ryan.yambra@multco.us
Multnomah County Department of County Human Services this week began notifying approximately 713 clients of a security breach that may have affected their personal information.
The breach occurred May 28, 2019 when a County staff member was dismissed from employment, but briefly continued to have access to County Aging, Disability & Veterans Services records before their account was terminated later that same day. That allowed the former employee to access and view client information that was available to them prior to their separation from employment. The breach was discovered on May 31, 2019 and an investigation launched the next business day.
On June 10, 2019, the County also notified Gresham Police of the former employee’s activity. The County is cooperating with the police investigation.
This incident occurred as a result of a gap discovered in the County’s termination process, which has since been corrected.
The names and Social Security numbers of 40 clients of Aging, Disability & Veterans Services were accessed.
The names and state Department of Human Services identification numbers for 673 clients were also accessed.
No other financial, medical or identifying information for those clients was accessed.
No other Multnomah County clients were involved, or other any Multnomah County information systems impacted.
Clients are being notified by letters this week.
What Clients Can Do
Multnomah County is encouraging affected clients to take additional steps to protect their personal information. Clients whose Social Security numbers were accessed are being given information on how to sign up for free credit monitoring.
What We Are Doing to Help
Multnomah County and the Aging, Disability & Veterans Services Division are committed to keeping personal information private and the County takes many steps to protect it. The County has policies and procedures for immediately revoking access to County computer systems when a staff member is terminated.
The County has completed a thorough investigation of this breach and, as a result, is updating and improving its procedures to ensure an event like this does not happen again. The County is also reviewing County-wide and department-level policies to increase protection of personal information in response to this incident. The County is also working to mitigate any potential harm to clients by providing information and credit monitoring. The County sincerely regrets any inconvenience or worry this incident presents to any client or their family.
Clients that receive a letter are urged to contact ID Experts at 1-800-939-4170. MyIDCare representatives have been fully versed on the incident and can answer questions or concerns regarding the protection of personal information. MyIDCare representatives are available Monday through Friday from 6 am - 5 pm Pacific Time.
###