An employee of the Office of the Medicaid Inspector General for the state of New York decided to copy and paste the wrong thing last October.
An unidentified employee of that office sent 17,743 Medicaid patient records to a personal email account, according to a July 13, 2013 OMIG report. The records included first and last names, birth dates, Medicaid client information numbers and Social Security numbers. Additional records may also have been compromised, the report said.
The unidentified employee is on administrative leave while the OMIG's office reviews the case. The report did not disclose what happened to the patient information after it reached individual's personal email account.
The OMIG has strengthened information technology department security as a result of the email diversion. Owners of the compromised records were notified of the diversion and warned to keep tabs on their accounts.
Go here to view the full report.