[SE-Dir] FW: DHS Security Incident/Data Breach

[SANDBERG Ruby - ODE]

TO: District and ESD Special Education Directors

The message below is being sent to you on behalf of:

Candace Pelt, Ed.D.
Assistant Superintendent
Office of Student Services
______________________________________________
March 21, 2019


The Vocational Rehabilitation Director's Office would like you to be aware of this security incident:


From: Vocational Rehabilitation Director's Office
Date: March 21, 2019
To: VR All Staff
The Department of Human Services (DHS) has detected a security incident that possibly involved client information. The number of people and the information involved is still under investigation. This message is a precautionary measure. Attached find a Frequently Asked Questions document that may be helpful.

The Department of Human Services takes the confidentiality of client information seriously. Our technology staff quickly detected and contained the incident.

What happened?
On Jan. 28, 2019, DHS and the Enterprise Security Office Cyber Security team confirmed that a breach of regulated information had occurred. Nine employees opened an email that compromised their Outlook mailboxes and allowed access to these employee's email information.

Passwords were immediately reset to stop access, and security officials began investigating to determine the scope of the incident and the specifics of the information involved.

The unauthorized access to the affected e-mail boxes was successfully stopped. DHS is in the process of thoroughly reviewing the incident and the information involved.

What DHS is doing about it?
The security and confidentiality of personal information is critical to DHS. While there is no indication that any personal information was copied for its email system or used inappropriately, the department will be offering identity theft recovery services for impacted individuals.

The agency has hired an outside entity, IDExperts, to perform a forensic review to clarify the number and identities of Oregonians whose information was exposed, and the specific kinds of information involved. ID Experts will send notices to the potentially impacted individuals with instructions on how to register for services, which includes free credit monitoring.

ID Experts has also established a toll-free information line at (800) 792-1750 beginning Friday (March 22, 2019).
There is also an established website with information: http://ide.myidcare.com/oregonDHS



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/se-dir/attachments/20190321/1c373c59/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Final News Release_3_21_19.pdf
Type: application/pdf
Size: 171846 bytes
Desc: Final News Release_3_21_19.pdf
URL: <https://omls.oregon.gov/pipermail/se-dir/attachments/20190321/1c373c59/attachment.pdf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: State of Oregon DHS FAQ.pdf
Type: application/pdf
Size: 136932 bytes
Desc: State of Oregon DHS FAQ.pdf
URL: <https://omls.oregon.gov/pipermail/se-dir/attachments/20190321/1c373c59/attachment-0001.pdf>