South Carolina Medicaid employee leaks recipient data

South Carolina Medicaid data was leaked after the information was transferred to a personal email account.

How many victims? 228,000.

What type of personal information? Names, addresses, phone numbers, and Social Security numbers, which also double as Medicaid ID numbers.

What happened? South Carolina Medicaid employee, Christopher Lykes Jr., 36, improperly transferred information on more than 228,000 people to his personal email account. The data was compiled over several months.

What was the response? Lykes was arrested and charged with violating medical confidentiality laws. He also was fired. New security measures are in place, and victims will be notified and offered free identity theft protection services.

Details: After an investigation launched earlier this month by the state Department of Health and Human Services (HHS), officials concluded that the information was transferred to one other person, apparently intentionally, though they are unsure of the motive. There are no reports that the information has so far been misused. The state Law Enforcement Division is investigating.

Quote: “I've woken up every morning for the past week praying somehow I could find a reason or the individual who committed the act would tell us this is just a big mistake,” said Anthony Keck, director of HHS.

Source: myrtlebeachonline.com, The State, "SC agency says information leaked on 228K people," April 19, 2012.

close

Next Article in The Data Breach Blog

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.