Developmental Disabilities Services Announces Outreach to Service Recipients, Legal Guardians about Data Breach

DOVER (Oct. 21, 2022) – The Delaware Division of Developmental Disabilities Services is announcing today that it is mailing letters to service recipients and legal guardians who were impacted by a recent data breach incident and is providing information to the public regarding the incident.

On August 23, 2022, staff within the Division of Developmental Disabilities Services (DDDS) discovered that in the process of creating new user accounts in the division’s client database, DDDS staff inadvertently provided access to individual records of 7074 individuals. As a result of these actions, 159 new users had potential access to service recipients’ personal, identifiable information and protected health information as well as potential access to more detailed information through accessed accounts.

A thorough investigation of the incident was conducted. Using forensic analysis available through the software’s vendor, the division has been able to determine how many users accessed information not intended for their use, and which service recipient records were opened and viewed. While the division has determined that only 12 detailed records were actively accessed, certain personal, identifiable information and protected health information was passively available to any user with the erroneous access level. The software vendor is unable to determine who may have passively viewed this information.

Based on this internal investigation and consultation with the software vendor, the division is taking corrective measures to tighten security and protection of the personal health information of its service recipients. DDDS has:

  • Reviewed and reinforced its Health Insurance Portability and Accountability Act (HIPAA)-related policies and procedures.
  • Established new guidelines for the creation of user accounts and a tightened approval process for accessing records.
  • Worked with its vendor to institute technology checks on providing access.

The division will incorporate lessons from this analysis into the design and implementation of its new client data management system scheduled for transition in 2023.

As required by HIPAA and state law, the Delaware Division of Developmental Disabilities Services has reported this breach to the U.S. Department of Health and Human Services and to the Delaware Department of Justice.

The Division of Developmental Disabilities Services is also establishing a dedicated call center independently staffed by a contracted company to answer any questions about this incident. Call center representatives have been fully versed on the incident and can answer questions or concerns individuals may have regarding protection of their personal information. Additionally, the division will be offering free access to credit monitoring to all impacted parties for a period of one year.

The call center can be reached at 1-833-875-0644 Monday through Friday, from 9:00 a.m. to 9:00 p.m. Eastern Time, excluding U.S. holidays.

Information will also be posted on the Delaware Department of Health and Social Services website at: https://dhss.delaware.gov/dhss/ and the division’s website: https://dhss.delaware.gov/dhss/ddds/.


DPH Issues Reminder of Open Testing Dates for TB; Announces Call Center to Close Friday, June 1, 2018

DOVER — The Division of Public Health (DPH) is continuing its efforts to encourage former residents and employees of the ManorCare Health Services Foulk Road facility in Wilmington, between January and September 2017, to be tested for tuberculosis (TB). On May 25, 2018, DPH announced hundreds of individuals at the facility may have been exposed to a person with active TB during the nine-month period. While the risk for transmission of TB is usually not high, DPH has been contacting former patients and employees via letters and phone calls to encourage them to seek free TB testing at DPH clinics located in one of three Department of Health and Social Services (DHSS) State Service Centers.

DPH will offer three open testing days at its clinic at the Hudson State Service Center, 501 Ogletown Road, Newark, as the overwhelming majority of former staff and residents live in New Castle County. The open testing dates are June 4-6, 2018, from 8:30 a.m. to 11:30 a.m. and 1 p.m. to 3:30 p.m. Testing is for walk-ins only on these days.

DPH opened a call center on Tuesday, May 29, 2018, to follow up with individuals who had been sent a letter and answer any questions, as well as to field questions from the public. As the number of incoming calls has decreased significantly since the opening, DPH is announcing that the call center will cease operations at 4:00 p.m., Friday, June 1, 2018. A recorded message on the call center line will instruct callers to contact the DPH TB Elimination Program with any questions at 302-744-1050.

Former staff and residents who cannot come to one of the open testing dates in Newark, or who live in Kent or Sussex counties and need an appointment are also asked to contact the TB Program and provide their contact information to staff. Residents in New Castle County will receive a call back from Hudson State Service Center staff to schedule an appointment. In Kent County, staff from Williams State Service Center in Dover will return calls to schedule appointments there, and in Sussex County, Adams State Service Center staff in Georgetown will return calls to schedule appointments there.

“We continue to actively encourage those who may have been exposed to tuberculosis to get tested as TB infection is treatable with medication that can prevent it from turning into full-blown, spreadable TB disease,” said DPH Director Dr. Karyl Rattay. “I would also like to thank our DPH call center operators who generously volunteered their time to assist us with our response efforts for their service.”

The individual considered to be the source of the exposure was not diagnosed with active TB until April 2018 when the person sought medical treatment for feeling extremely ill. TB is a reportable disease in Delaware and the health care facility that made the diagnosis reported it to DPH as required.

TB is a bacterium that can be inhaled into the lungs of others when a nearby person with the active disease coughs, sneezes, sings or laughs. People with TB disease are most likely to spread the disease to people they spend time with every day, such as family or other household members, close friends, and coworkers. Signs and symptoms of TB may include a progressively worsening cough that lasts more than two weeks, fatigue, weakness, weight loss, night sweats, fever, chills and chest pain. TB can affect any bodily organ but is infectious to others only when it occurs in the lungs or larynx (voice box).

Only people with TB symptoms can spread the disease. TB is not spread by casual or brief contact such as shaking hands, touching, sharing food or drink, utensils, bed linens or toilet seats, sharing toothbrushes or saliva from kissing.

TB disease is treatable and curable, usually by taking several medications for six to nine months. About 5 percent to 10 percent of persons infected with TB if untreated will develop the disease at some time in their lives; most within the first two years after the infection occurs.

In most people who breathe in TB bacteria and become infected, the body is able to fight the bacteria to stop them from growing. The bacteria become inactive, but they remain alive in the body and can become active later. This is called latent TB infection. People with latent TB infection cannot spread TB bacteria to others. People who have latent TB infection can be treated to prevent TB disease from developing.

For more information on tuberculosis, visit the Centers for Disease Control and Prevention website at: https://www.cdc.gov/tb/default.htm. For more information on the DPH Tuberculosis Elimination Program, visit http://dhss.delaware.gov/dhss/dph/dpc/tbservices.html.

A person who is deaf, hard-of-hearing, deaf-blind or speech-disabled can call the DPH phone number above by using TTY services. Dial 7-1-1 or 800-232-5460 to type your conversation to a relay operator, who reads your conversation to a hearing person at DPH. The relay operator types the hearing person’s spoken words back to the TTY user. To learn more about TTY availability in Delaware, visit http://delawarerelay.com.

Delaware Health and Social Services is committed to improving the quality of the lives of Delaware’s citizens by promoting health and well-being, fostering self-sufficiency, and protecting vulnerable populations. DPH, a division of DHSS, urges Delawareans to make healthier choices with the 5-2-1 Almost None campaign: eat 5 or more fruits and vegetables each day, have no more than 2 hours of recreational screen time each day (includes TV, computer, gaming), get 1 or more hours of physical activity each day, and drink almost no sugary beverages.


DPH Announces TB Response at Wilmington Long-Term Care Facility

DOVER – The Division of Public Health (DPH) announced today that over 600 individuals may have been exposed to someone with active tuberculosis (TB) at the ManorCare Health Services Foulk Road facility during a nine-month period in 2017. Consistent with routine Division TB protocols, the agency is sending out letters to former residents and staff of the facility who may have been exposed to the infected individual between January and September 2017. DPH is also following up with phone calls to provide information on free testing and treatment at one of its three clinics in Newark, Dover, and Georgetown.

While the risk of transmission is usually not high, DPH is recommending that those who have been exposed, and test positive after a TB skin or blood test, receive further medical evaluation and treatment so they do not develop complications from TB disease. The Division is providing free screenings and treatment to former residents and employees of the facility receiving the letters. The facility is providing testing and treatment to current staff and residents who may have been exposed during January and September 2017.

To enable staff to reach the large number of individuals who may have been exposed, DPH is opening a call center at its State Health Operations Center in Smyrna. The call center staff will begin making follow-up calls and taking questions from concerned former residents and staff of the facility at 9 a.m. on Tuesday, May 29, 2018. Hours of operation will be 9 a.m. to 4 p.m. The call center will remain open until the bulk of concerns and questions have been addressed. Hours may be adjusted to accommodate for peak volume. Any changes will be communicated through press release and social media communications.

The call center number is 1-866-408-1899. As a reminder it will be available starting at 9 a.m., Tuesday May, 29, 2018.

“This is an all hands-on-deck approach for us,” said DPH Director Dr. Karyl Rattay. “The most important thing we want people to know is that TB is treatable. That’s why it’s so important for us to reach out to all former residents and staff, to encourage them to get tested as soon as possible. Manor house leadership is working closely with the DPH and taking every measure necessary to protecting the health of its residents and staff.”
DPH will offer three open testing days at its clinic at the Hudson State Service Center (HSSC), 501 Ogletown Road, Newark, as the overwhelming majority of former staff and residents live in New Castle County. The open testing dates are June 4, 5 and 6, 2018, from 8:30 a.m. to 11:30 a.m. and 1 p.m. to 3:30 p.m. Testing is for walk-ins only on these days.

Anyone who cannot come to one of the open testing dates should call the DPH Call Center at 1-866-408-1899. Additionally, former staff and residents who live in Kent or Sussex counties are also asked to contact the Call Center, and provide their contact information to staff. Residents in Kent County will receive a call back from Williams State Service Center staff in Dover to schedule an appointment there. Residents in Sussex will receive a call back from Adams State Service Center staff in Georgetown to schedule an appointment there.

Residents in all three counties are asked to bring the letter they received from DPH when they arrive at any site for testing. Any former resident whose mobility makes getting to the clinic sites a challenge, is also asked to call the DPH Call Center to discuss testing options.

Thirty-five former staff and residents are currently living in seven other states. In addition to sending these individuals letters, DPH is coordinating with the states’ public health agencies to ensure the individuals are provided information on the closest public health testing clinic to them.

TB is generally on the decline throughout the country – with 9,557 cases nationwide in 2015 – but vigilance is important. Delaware had 22 cases of TB disease (also known as “active TB”) in 2015, 16 in 2016, 16 in 2017, and seven to date in 2018. As opposed to the latent kind, TB disease cases are defined as having the symptoms of the illness and potentially being able to spread it to others.

TB is a bacterium that can be inhaled into the lungs of others when a nearby person with the active disease coughs, sneezes, sings or laughs. People with TB disease are most likely to spread the disease to people they spend time with every day, such as family or other household members, close friends and coworkers. Signs and symptoms of TB may include a progressively worsening cough that lasts more than two weeks, fatigue, weakness, weight loss, night sweats, fever, chills and chest pain. TB can affect any bodily organ but is infectious to others only when it occurs in the lungs or larynx (voice box).
Only people with TB symptoms can spread the disease. TB is not spread by casual or brief contact such as shaking hands, touching, sharing food or drink, utensils, bed linens or toilet seats, sharing toothbrushes or saliva from kissing.

TB disease is treatable and curable, usually by taking several medications for six to nine months. About 5 percent to 10 percent of persons infected with TB if untreated will develop the disease at some time in their lives; most within the first two years after the infection occurs.

In most people who breathe in TB bacteria and become infected, the body is able to fight the bacteria to stop them from growing. The bacteria become inactive, but they remain alive in the body and can become active later. This is called latent TB infection. People with latent TB infection cannot spread TB bacteria to others. People who have latent TB infection can be treated to prevent TB disease from developing.

For additional information on tuberculosis, visit the Centers for Disease Control and Prevention website at: https://www.cdc.gov/tb/default.htm. For more information on DPH’s tuberculosis Elimination Program visit: http://dhss.delaware.gov/dhss/dph/dpc/tbservices.html.

A person who is deaf, hard-of-hearing, deaf-blind or speech-disabled can call the DPH phone number above by using TTY services. Dial 7-1-1 or 800-232-5460 to type your conversation to a relay operator, who reads your conversation to a hearing person at DPH. The relay operator types the hearing person’s spoken words back to the TTY user. To learn more about TTY availability in Delaware, visit http://delawarerelay.com.

Delaware Health and Social Services is committed to improving the quality of the lives of Delaware’s citizens by promoting health and well-being, fostering self-sufficiency, and protecting vulnerable populations. DPH, a division of DHSS, urges Delawareans to make healthier choices with the 5-2-1 Almost None campaign: eat 5 or more fruits and vegetables each day, have no more than 2 hours of recreational screen time each day (includes TV, computer, gaming), get 1 or more hours of physical activity each day, and drink almost no sugary beverages.