Data breach at Texas agency makes PHI available online

A data breach at the Texas Department of Aging and Disability Services (DADS) made Medicaid patients' information, including Social Security numbers and private health information, available online.

The breach impacted about 6,600 people, according to an announcement. The agency learned that on April 21, information from a Web application meant for use only within the organization was accessible on the Internet. DADS is offering credit monitoring and identity theft restoration to affected consumers for one year.

The organization adds that it has "strengthened its policies, procedures and Web-application security in an effort to prevent such a breach from occurring again." Announcement (.pdf)