“Any allegations of sensitive personal information being mismanaged or leaked is a serious matter. My office has opened investigations into this data breach on multiple fronts and as such we will have no further comment at this time,” according to Shapiro’s written statement.
The state Health Department said some of the vendor’s employees, who shared information through unauthorized Google accounts they created and disregarded security rules, caused the incident. The breach could have potentially exposed suspected COVID-19 patient’s test results, names, symptoms, information on household members, and emails and phone numbers in some instances, but not their financial information and Social Security numbers.
Insight Global released a statement saying they “deeply regret this happened and are committed to restoring the trust of any residents of Pennsylvania who may have been impacted. All necessary steps are being taken to secure any personal information, and we intend to learn and grow from this."