Local
Kentucky Measles Dashboard Exposed Patient Data, State Officials Say
A security vulnerability in Kentucky's public measles dashboard made private patient information accessible for an unknown period, state health officials said. The disclosure comes as the state's outbreak surpasses 200 cases, the most since 1991.
FRANKFORT â Private patient information for Kentuckians with confirmed measles cases was publicly accessible through the state's online disease dashboard, the Cabinet for Health and Family Services acknowledged Friday, raising concerns about data privacy amid the state's largest measles outbreak in more than three decades.
The security vulnerability was discovered on Sept. 23, according to cabinet spokeswoman Beth Fisher, who said the flaw "made some private patient information accessible to the public."
"Cabinet for Health and Family Services staff were quickly notified and took action to secure the information and prevent further public access," Fisher said in a statement.
It remains unclear how many people's information may have been exposed. Fisher said the cabinet is investigating "to determine its scope" and will make all notifications required by state and federal law once the review is complete.
At the time the vulnerability was discovered, fewer than 100 measles cases had been confirmed in Kentucky. The state now reports more than 200 cases, the highest count since 1991, when Kentucky recorded 443 cases, mostly among children under age 5, according to the Centers for Disease Control and Prevention.
The exposure of patient data on a public dashboard raises questions about how the state handles sensitive health information during a fast-moving outbreak. The dashboard, which displays aggregate case data, is intended to keep the public informed about the spread of the disease.
Measles is extremely contagious and spreads through the air from coughs or sneezes, according to the CDC. One infected person can infect nine in 10 unprotected people nearby. Symptoms include fever, cough, runny nose, red eyes and a rash.
The best protection against measles is vaccination, which is generally available at pharmacies and through medical providers. The CDC recommends the measles vaccination series at 12 to 15 months of age and again at 4 to 6 years old.
State officials did not specify what type of patient information was exposed or how long it remained accessible. The cabinet said it would provide further details after completing its review.