A not-for-profit organization for Maryland residents with intellectual and developmental disabilities notified the nearly 14,000 people it serves that their personal health information may have been compromised.
Service Coordination, Frederick, Md., discovered on Oct. 30, 2013, that its computer systems had been hacked between Oct. 20 and Oct. 30. The files accessed included the name of some of those the group serves, along with each of those individuals' Social Security numbers, medical assistance number, Medicaid and Medicaid waiver status and reason, Developmental Disabilities Administration direct service provider, demographic and other information related to case management services.
The organization, which alerted the DDA, the FBI and the Department of Justice, delayed sending letters to affected individuals until recently because of a criminal investigation. That delay was removed when law enforcement identified the alleged hacker, searched the hacker's home and confiscated equipment and accounts.
“We regret the occurrence of this unfortunate criminal incident and we apologize for any inconvenience this may have caused individuals who we work with,” Service Coordination Executive Director John Dumas said in a statement
Though officials have not identified any fraudulent use or distribution of the information, according to a company release, those affected are being offered a free year of identity theft protection services. Service Coordination is also encouraging them to monitor their account statements, to obtain free credit reports and to contact the Federal Trade Commission or national credit reporting agencies.Follow Rachel Landen on Twitter: @MHrlanden