The DSH employee had access to Atascadero (Calif.) State Hospital data servers as part of their IT job responsibilities, the department said in a news release.
DSH discovered the breach Feb. 25 as part of its annual review of employees’ data access rights. Patient and employee information exposed in the breach included names, COVID-19 test results and data needed for COVID-19 tracking.
The department is investigating the breach and said it has placed the employee on administrative leave until it is finished.
More articles on cybersecurity:
Ransomware attack exposes 27,000+ Arizona health plan members’ data for 2.5 weeks
Nearly 30,000 affected in Colorado eye care provider phishing email scam
Ransomware attack knocks South Carolina hospital’s computer systems offline