Data Breach at Texas Health & Human Services Jeopardizes Identities of 61K Individuals. Featured
Seven employees of Texas Health & Human Services fired after discovery they stole 61K identities and cash from thousands of Texans who received Medicaid, food stamps and other public assistance.
A class action investigation was launched after it was revealed that Texans who receive agency services through the Texas Health and Human Services Commission (“THHSC“) are being notified about their protected health, personal identifying information or sensitive personal information possibly being appropriately accessed, used or disclosed.
What Happened?
On Nov. 21, 2024, THHSC learned that agency employees improperly accessed account information and personal identifying information of at least 61,000 individuals. THHSC took immediate steps to mitigate the breach by terminating the employees involved and referring the incident to the Texas Health and Human Services Office of Inspector General (OIG) for investigation and coordination with prosecutor offices to pursue criminal charges.
The breach impacts some recipients of the Supplemental Nutrition Assistance Program, also called SNAP.
What Information was Breached?
THHSC advises that information disclosed during the breach was not the same for all affected individuals but that such information included –
- full name
- home address
- telephone numbers
- date of birth
- email address
- Social Security number
- Medicaid and Medicare Identification numbers
- financial info
- employment
- banking
- banking
- benefits
- health (medical records, diagnosis, treatment and care, disability status)
- insurance (health plan or policy, life insurance plan or policy, insurance company, member or group ID number
- medical
- certificate
- license
- other personal information
The compromised information spans the period between June 2021 and December 2024. THHSC is advising SNAP recipients to check their accounts for any fraudulent activity. The agency is still determining the impact of the privacy breach on other THHSC programs.
What is THHSC Doing to Protect My Identity?
According to the notice published on THHSC’s website, the agency is strengthening internal policy controls and working to implement additional fraud prevention measures, including enhanced monitoring and alerts to detect suspicious activity.
THHSC announced it is offering two years of free credit monitoring and identity theft protection services to those affected by the breach. Those affected by the breach will be notified via first-class mail no later than January 20, 2025.
What can Hackers Do With My Information?
Stolen PII and PHI can be used to commit identity theft, open new credit accounts, make unauthorized purchases or obtain loans. Cybercriminals have recently targeted America’s essential industries and in so doing have forced millions of Americans to face the fallout from these attacks.
Leaked or stolen data can be sold on the dark web forums and may be used for fraud and medical identity theft, a type of fraud, where threat actors use stolen information to submit forged claims to insurers.
Clients affected by the breach are exposed to a heightened and imminent risk of fraud and identity theft. They must now and in the future closely monitor their financial accounts to guard against identity theft and fraud.
If you receive a data breach notification from Texas Health & Human Services it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options at no cost to you. For more information, please review these recommendations.
Protect Your Identity. Join the Texas Health & Human Services Data Breach Class Action.
The lawsuit alleges that Texas Health and Human Services breached its duties under common law and the Federal Trade Commission Act to implement reasonable security measures, comply with industry standards and federal data-security regulations, encrypt sensitive data, and provide adequate and timely notice of the breach.
If you receive a notification letter from Texas Health & Human Services you are at permanent risk of identity theft and the devastating financial and legal consequences that go along with it.
You may be eligible to participate in a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
The lawsuit looks to cover anyone in the USA whose private information was compromised by the breach announced by Texas Health & Human Services on January 17, 2025.
Please complete the form shown on this page and a data breach attorney will contact you. There is no cost to you.