Data Breach at Health Agency. By the Numbers.

$1.6 million cost of federal fine to the state health agency

6,617 people had their personal health information accessible

How did the data breach occur?  

• “an internal application was moved from a private, secure server to a public server, where a software flaw allowed the private information to be viewed without access credentials.”
• no risk analysis conducted
• no access and audit controls

The state agency: Texas Department of Aging and Disability Services

Government Technology | Data Breach Costs Texas Health Agency $1.6 Million