50 likes | 179 Views
Former Worker Medical Screening Program – Loss of PII Mary Fields, Program Manager Office of Health, Safety and Security Department of Energy. Background.
E N D
Former Worker Medical Screening Program – Loss of PII Mary Fields, Program Manager Office of Health, Safety and Security Department of Energy
Background • At the request of the FWP Program Manager, INL provided roster to CPWR, one of two FWP service providers to former INL worker population. Roster contained: • Names of 64,188 current and former employees at DOE’s Idaho facilities • S number • Social Security Number • Date of birth • Employer • Hire data • CPWR & Queens College, the other FWP service provider to the INL former worker population, produced a joint letter that was mailed to individuals on the original roster using the IRS Computerized Mail-Out Program.
Background (cont.) • In preparation for another joint mailing, Queens College “scrubbed” the original roster of names for individuals who: • Had previously participated in the program • Had been referred to the National Supplemental Screening Program, another component of the FWP • Queens College shipped a password-protected CD containing 59,617 names via UPS to CPWR • UPS notified Queens College that the package had been damaged and the contents were missing
Responses FWP Projects: • Each project reported the loss of PII to their respective IRBs • CPWR notified FWP Program Manager on behalf of both projects INL IRB: • Dena Tomchak notified HSPP Program Manager INL: • Notified current workers and former workers receiving pensions
HSS Response • Notified DOE-Cyber Incident Response Capability (DOE-CIRC) • Established a toll-free hotline to answer questions regarding the incident • Offered to provide free credit monitoring services for one year for those whose names were on the CD • Ordered the suspension of PII transmittals pending the results of an investigation • Provided instructions for the safe transmittal of PII and restarted the program • Worked with the IRS to mail notifications to additional former workers whose addresses were unknown