The Delaware Division of Public Health (DPH) announced November 15 that it is mailing letters to individuals who were impacted by a recent data breach incident and is providing information to the public regarding the incident. On September 16, 2020, the Department of Health and Social Services (DHSS) discovered that a Division of Public Health temporary staff member mistakenly sent two unencrypted emails, one on August 13, 2020, and one on August 20, 2020, to an unauthorized user. These emails contained COVID-19 test results for approximately 10,000 individuals. The August 13, 2020 email included test results for individuals tested between July 16, 2020, and August 10, 2020. The August 20, 2020 email included test results for individuals tested on August 15, 2020. The emails were meant for internal distribution to call center staff who assist individuals in obtaining their test results. The emails were sent, mistakenly, to only one unauthorized user. This individual alerted the Division of Public Health of the inadvertent receipt of emails. They reported deleting the emails, and the files attached to them. Currently, there is no evidence to suggest that there has been any attempt to misuse any of the information.
