Industry - Data Breach
Executive Summary
The Fresno County Department of Social Services disclosed that a former employee caused a data breach exposing personal information of over 1,100 In-Home Supportive Services clients, including names, case numbers, 636 phone numbers, and six addresses. The department has notified affected individuals by mail and is working with law enforcement on an investigation while implementing additional security measures to prevent future unauthorized access. Clients are advised to monitor their credit r...
What Happened
The Fresno County Department of Social Services discovered that a former employee caused a data breach exposing personal information of 1,114 In-Home Supportive Services clients. The compromised data included client names, case numbers, 636 phone numbers, six addresses, and additional unspecified client information. The department notified affected individuals by mail and reported the incident to law enforcement, which is now assisting with the investigation.
Who Is Affected
More than 1,100 clients of Fresno County's In-Home Supportive Services program are affected by this breach. In-Home Supportive Services typically serves elderly, blind, and disabled individuals who require assistance to remain safely in their homes, making this population particularly vulnerable. The exposure of names, case numbers, phone numbers, and some addresses puts these clients at risk of targeted scams, identity theft, and potential physical harm given the sensitive nature of their circumstances.
Why It Matters
This incident highlights the ongoing risk of insider threats, where employees or former employees with legitimate access misuse their privileges to extract sensitive data. The breach is particularly concerning because it targets a vulnerable population receiving social services, and the involvement of a former employee suggests potential gaps in access management protocols after employment termination. The county's response indicates systemic weaknesses in monitoring data access and enforcing security controls for sensitive government databases.
What You Should Do
Affected individuals should immediately review their credit reports from all three major credit bureaus for any unfamiliar activity and consider placing fraud alerts or credit freezes on their accounts. Change passwords on any online accounts, particularly those that may have used the same phone number or address for account recovery. Be vigilant about unsolicited phone calls, emails, or visits that reference your case information, as scammers may use the leaked data to impersonate county officials or service providers.
Summary generated from verified sources and reviewed before publication. How we summarize.