Carl Albert State College server breach in 2016 leads to USHHS request for DHS to re-notify TANF clients
A state assessment computer server at Carl Albert State College (CASC) in Poteau, Oklahoma, was accessed by an unauthorized source on April 7, 2016. The server contained state assessment information that included the names, addresses, dates of birth and social security numbers of current and former Oklahoma Department of Human Services (DHS) Temporary Assistance for Needy Families (TANF) clients. CASC was notified of the unauthorized access on April 28, 2016. The DHS Office of Inspector General (OIG) was notified on May 13, 2016. Affected TANF clients were notified by Carl Albert State College on or about Aug. 9, 2016. Because of DHS responsibilities under the Health Insurance Portability and Accountability Act (HIPAA), the U.S. Department of Health and Human Services (HHS) requested DHS send a second notice which was mailed Nov. 30, 2017.