Possible Security Incident
The Oklahoma Department of Human Services (OKDHS) has notified clients that receive some OKDHS programs and services that their names and personal information may have been contained on an OKDHS password protected laptop computer that was stolen from an OKDHS employee. The personal information included names, Social Security numbers, dates of birth and home addresses of clients who receive Medicaid; Child Care assistance; Temporary Assistance to Needy Families (TANF); Aid to the Aged, Blind and Disabled; and Supplemental Nutrition Assistance (SNAP or Food Stamps).
The data did not contain driver’s license numbers, credit card or banking information. The potential breach did not affect Child Welfare services.
Because the computer was password protected, we have determined the risk of disclosure is low. Nevertheless, we have sent letters to the affected clients that their personal information was in the file.
We have no evidence that the personal information has been accessed or used for illegal purposes. OKDHS is taking precautionary steps by informing and advising all affected clients about safeguard measures aimed at protecting privacy.
What happened?
A laptop computer, along with other personal belongings, was stolen from an OKDHS employee’s car. The laptop computer has not been recovered and therefore, the possibility exists that OKDHS clients’ personal information may have been accessed. Immediately upon learning of the stolen property, the Oklahoma City Police Department and the OKDHS Office of Inspector General launched an investigation.
Who is affected?
OKDHS clients who receive Medicaid, Child Care assistance, Temporary Assistance to Needy Families (TANF), Aid to the Aged, Blind and Disabled and the Supplemental Nutrition Assistance Program (SNAP or Food Stamps) whose personal information was located on the stolen computer.
The data did not contain driver’s license numbers, credit card or banking information. The potential breach did not affect Child Welfare services.
When was my personal information exposed?
Because the computer was password protected, we have determined the risk of disclosure is low. However, until the computer is recovered, some clients’ personal information may be at risk. That is why OKDHS is providing information about taking steps to protect your personal information.
What specific items of my personal information were involved?
The personal information you provided OKDHS to receive Medicaid, Child Care assistance, Temporary Assistance to Needy Families (TANF), Aid to the Aged, Blind and Disabled and the Supplemental Nutrition Assistance Program (SNAP or Food Stamps). The specific items were names, Social Security numbers, dates of birth and home addresses of clients who receive those services mentioned.
The data did not contain driver’s license numbers, credit card or banking information.
What is being done now?
The investigation into the theft is ongoing. OKDHS is making every effort to contact all clients whose personal information was located on the laptop computer. The Oklahoma City Police Department is conducting an investigation. The OKDHS Office of the Inspector General is providing support to that investigation.
If my information was among the files exposed or stolen, does this mean that I'm a victim of identity theft?
No. The fact that someone may have had access to your information doesn't mean you are a victim of identity theft or that they intend to use the information to commit fraud. We wanted to let you know about the incident so that you can take appropriate steps to protect yourself. The best way to protect yourself is to place a free fraud alert on your credit files and review your credit reports.
Has my information been used to steal my identity?
At this time, we have no indication that the information contained on the computer has been accessed or used for illegal purposes. However, the possibility exists and that is why we have contacted the affected individuals.
What is OKDHS doing to prevent this from occurring again?
OKDHS already uses numerous security measures to ensure client data is safeguarded. But in light of this incident, we will review all policy, procedures and training methods related to information security.
What should I do?
You should carefully review any bills that you receive in the near future, especially credit card transactions, to ensure that the charges associated with your accounts are accurate. Get additional information about identity theft (Link opens in new window) or call toll free 1-877-ID-THEFT (1-877-438-4338); TTY: 1-866-653-4261. We also encourage you to read through the frequently asked questions.
Reporting a Suspected Security Incident
Report any improper use of OKDHS resources or exposure of personnel information to:
Oklahoma Department of Human Services
Information Security Office
P.O. Box 25352
Oklahoma City, OK 73125-0352
Phone: (405) 521-3646