[BreachExchange] Duluth HDC experiences data breach

Destry Winant destry at riskbasedsecurity.com
Mon Mar 25 02:18:31 EDT 2019


The Human Development Center in Duluth says a data breach occurred in
January, possibly exposing personal data of clients.

According to HDC, during a routine review of email logs on Jan. 25, it
was determined that an employee’s email account was compromised and
accessed by individuals outside HDC on Jan. 16 and Jan. 18.

Upon review of the information within the email account, protected
health information consisting of client names, date of birth, internal
HDC client numbers, internal HDC description of services and a limited
number of procedure codes were found.

HDC said it believes the likelihood the information was accessed or
downloaded within the emails was low. Letters were mailed to affected
individuals with information regarding the data breach. Clients
impacted by the data breach were seen at HDC in Duluth between 2011
and 2018.

HDC said it has investigated how the breach happened and has taken key
steps to help manage inappropriate cybersecurity attacks in the
future. Anyone with questions regarding the data breach can call

More information about the BreachExchange mailing list