Oklahomans with disabilities may face identity theft after DHS data jeopardized

LONE GROVE, Okla. (KXII) - A “spoofed email” led to a possible DHS data breach for over 5,500 Oklahomans with disabilities on a waitlist for home services.

A company contracted with the Oklahoma Department of Human Services said a data breach compromised personal information--including social security numbers-- of thousands of Oklahomans on a list that helps connect people with developmental disabilities and their families with resources to help make life easier.

Now the people on that list could be facing identity theft.

Heather Johnson said her sons Logan and Cooper were on that waitlist up until recently.

“I can’t believe it took them so long to tell us,” Johnson said.

The list was managed by Liberty of Oklahoma. Johnson said it took 80 days for Liberty to let her know there was even a problem.

“When you have a child with a disability, or you yourself have a disability, and you have to be involved in government services in order to get the treatment and the things that you need to live a full life, you’re already so exposed,” Johnson said. “You’re already sharing so much of your information with all of these companies. And you have to trust that they’re protecting that sensitive information.”

According to a press release, Liberty learned in early December that a “spoofed email account” impersonating an employee allowed an unknown third party to see documents and emails, including a spreadsheet with names, addresses, dates of birth, phone numbers, and social security numbers of people on the Oklahoma Waitlist program.

“So many people have your information [already],” Johnson said. “And now you get a letter that says ‘Some bad people now have your information, and we’re not sure what they’re going to do with it.’ It’s just very disheartening and I’m very disappointed with the state of Oklahoma right now.”

The press release said Liberty blocked the email account from their systems and didn’t find any other unusual activity. They’re giving a free year of credit fraud monitoring with Experian, which does include some identity theft insurance.

Johnson said she signed up yesterday.

“There’s nothing else... we just have to wait and see if somebody tries to I guess open up an account with one of their social security numbers,” Johnson said.

Copyright 2022 KXII. All rights reserved.