April 24, 2020 Incident: Oklahoma Department of Human Services

The Oklahoma Department of Human Services (OKDHS) received an email from a citizen on April 23, 2020 reporting that some of her personal information was visible to another citizen who was applying for benefits.  On April 24, 2020, it was determined that this involved the okbenefits.org website, and an investigation began that same date with OKDHS, Office of Management and Enterprise Services (OMES) and the vendor Accenture to determine the cause of the incident.  The investigation took 8 days.  It was determined that a function which allowed an applicant to begin an application and finish it later was involved.  The appropriate tables were queried to identify any other records similar to the reported incident, and the results were reviewed to ensure that no other mismatched records existed.  Steps were taken to remove any existing application records of the type involved in this incident and to prevent future occurrences.

The investigation revealed that the personal information of 3 individuals was affected.  OKDHS is in the process of providing notice to impacted individuals with information regarding steps they can take to protect their information.