Lake County Health Department and Community Health Center
The Lake County Health Department announced two data breaches, one of which occurred in 2019, that compromised the data of almost 25,000 people.
The first breach occurred after an unencrypted email was sent to an internal employee’s personal email address.
The spreadsheet consisted of medical records requests from December 2016 to June 2019 made through a third party vendor who provides the release of information services.
The health agency wrote a letter to 24,241 affected individuals on July 2 informing them of the breach.
Why it took the health service so long to alert anyone affected by the breach is unknown.
Federal officials disagreed with the health department's conclusion that no one's personal health information was compromised in the initial hack and asserted that it may have been.
"id": "LAK171411223",
"linkid": "healthdepartment",
"type": "Data Leak",
"date": "07/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"