Developmental Disabilities Services Announces Outreach to Service Recipients, Legal Guardians about Data Breach

DOVER (Oct. 21, 2022) – The Delaware Division of Developmental Disabilities Services is announcing today that it is mailing letters to service recipients and legal guardians who were impacted by a recent data breach incident and is providing information to the public regarding the incident.

On August 23, 2022, staff within the Division of Developmental Disabilities Services (DDDS) discovered that in the process of creating new user accounts in the division’s client database, DDDS staff inadvertently provided access to individual records of 7074 individuals. As a result of these actions, 159 new users had potential access to service recipients’ personal, identifiable information and protected health information as well as potential access to more detailed information through accessed accounts.

A thorough investigation of the incident was conducted. Using forensic analysis available through the software’s vendor, the division has been able to determine how many users accessed information not intended for their use, and which service recipient records were opened and viewed. While the division has determined that only 12 detailed records were actively accessed, certain personal, identifiable information and protected health information was passively available to any user with the erroneous access level. The software vendor is unable to determine who may have passively viewed this information.

Based on this internal investigation and consultation with the software vendor, the division is taking corrective measures to tighten security and protection of the personal health information of its service recipients. DDDS has:

  • Reviewed and reinforced its Health Insurance Portability and Accountability Act (HIPAA)-related policies and procedures.
  • Established new guidelines for the creation of user accounts and a tightened approval process for accessing records.
  • Worked with its vendor to institute technology checks on providing access.

The division will incorporate lessons from this analysis into the design and implementation of its new client data management system scheduled for transition in 2023.

As required by HIPAA and state law, the Delaware Division of Developmental Disabilities Services has reported this breach to the U.S. Department of Health and Human Services and to the Delaware Department of Justice.

The Division of Developmental Disabilities Services is also establishing a dedicated call center independently staffed by a contracted company to answer any questions about this incident. Call center representatives have been fully versed on the incident and can answer questions or concerns individuals may have regarding protection of their personal information. Additionally, the division will be offering free access to credit monitoring to all impacted parties for a period of one year.

The call center can be reached at 1-833-875-0644 Monday through Friday, from 9:00 a.m. to 9:00 p.m. Eastern Time, excluding U.S. holidays.

Information will also be posted on the Delaware Department of Health and Social Services website at: https://dhss.delaware.gov/dhss/ and the division’s website: https://dhss.delaware.gov/dhss/ddds/.


Columbus Organization Will Continue to Connect Individuals to Services, Supports

DOVER (May 4, 2022) – The Delaware Division of Developmental Disabilities Services (DDDS) announced today that the Columbus Organization will continue to operate as the Division’s Targeted Case Management Provider, providing case management support to individuals with intellectual and developmental disabilities and their families across the State. Targeted Case Management through the Columbus Organization provides each individual and family with access to a Community Navigator ensuring a person-centered planning approach that supports individuals receiving services to live their best life.

“Our Division’s top priority is to ensure every individual we serve, and their family, can access the services and supports they need to lead the life they want to live,” said Marissa Catalon, Director of the Division of Developmental Disabilities Services. “Columbus’s Community Navigators do just that by connecting individuals to the communities they live in.”

The Columbus Organization works to serve individuals with intellectual and developmental disabilities by making connections to services and supports in the community. Those include access to, for example, supported employment services and day services, behavioral supports, or assistive technologies. They also support families in gaining access to respite services and home or vehicle modifications.

Carlos Hernandez, Senior Vice President with the Columbus Organization, shared his enthusiasm for this opportunity to continue partnering with DDDS. “We look forward to continuing our partnership with DDDS and to making a significant impact on the lives of so many people in Delaware. Beyond the benefits of maintaining continuity of care for these individuals, we also believe that Columbus’ complex care model, state-of-the-art training and analytics tools, and dedicated Quality Assurance team, will contribute greatly to helping individuals achieve their meaningful life-goals while improving health outcomes.”

DDDS began working with the Columbus Organization in July 2017 when the Division first implemented Targeted Case Management Services. Over the past five years, Columbus has maintained an excellent record of Medicaid compliance. The nonprofit’s average compliance scores are consistently in the 90th percentile; this year its Medicaid compliance scores range from 95% to 98%.

The Columbus Organization will continue to provide services primarily to individuals with intellectual and developmental disabilities (IDD) living in their own home or in their family home. DDDS has additional case management and resource coordination services for individuals with IDD living in provider-managed residential settings and for those individuals served by the Diamond State Health Plan Plus – a Medicaid Long-Term Services and Supports (LTSS) program.

DDDS is one of 11 divisions in the Department of Health and Social Services. It serves more than 5,000 service recipients statewide.

-30-

The Department of Health and Social Services is committed to improving the quality of life of Delaware’s citizens by promoting health and well-being, fostering self-sufficiency, and protecting vulnerable populations.