PROVIDENCE – Staff from the R.I. Department of Health accidentally emailed protected health information regarding people in COVID-19 isolation or quarantine in recent months, the department announced Wednesday.
In a series of emails sent between July 28, 2022, and Oct. 20, 2022, RIDOH staff accidentally included a link to a spreadsheet containing information about people receiving food box deliveries while in COVID-19 isolation or quarantine.
The spreadsheet included the following information: date of contact by RIDOH; first, middle and last name of the person; phone number; street address, apartment number, city and ZIP code; the person’s specific needs; household information; delivery information; and additional notes.
The file contained information for approximately 8,800 people and was emailed to 46 people, all of whom were on the list to receive food box services, according to the department.
“RIDOH is not aware, at this time, of any security concerns related to this breach,” according to a news release. “No medical information or financial information was included in the breach.”
The R.I. Department of Health began investigating the breach “as soon as it was discovered,” according to the release. Since discovery, it has conducted email searches to determine the scale of the breach and restricted access to the file. RIDOH said it is also taking steps to prevent future breaches, including additional trainings for staff and enhanced security measures for the handling of sensitive information.
RIDOH will send a letter notifying all people listed in the spreadsheet by Dec. 20.
The R.I. Office of the Attorney General could not immediately be reached for comment.
Claudia Chiappa is a PBN staff writer. You may contact her at Chiappa@PBN.com.
