NewsLocal News

Actions

Florida Healthy Kids announces cybersecurity incident

Florida Healthy Kids announces cybersecurity incident
Posted at 6:54 PM, Jan 28, 2021
and last updated 2021-01-28 18:54:38-05

TALLAHASSEE, Fla. (WTXL) — The Florida Healthy Kids Corporation announced Thursday a cybersecurity incident experienced by its vendor, Jelly Bean Communications Design.

Jelly Bean Communication Design was responsible for hosting the FHKC website at the time of the incident, a press release said.

The security incident involved the personal data of online applicants and enrollees, but FHKC said they have no confirmation of anyone's personal information being removed from the system.

"FHKC was notified on December 9, 2020, that several thousand applicant addresses had been inappropriately accessed and tampered with," the press release said. "These addresses are collected as part of the online Florida KidCare application."

FHKC said they then talked with independent cybersecurity experts to thoroughly review the incident to confirm the scope and severity of what happened.

The experts identified significant vulnerabilities in the website hosting platform and the databases that support the online Florida Kid Care application.

"FHKC learned that these vulnerabilities spanned a seven-year period from November 2013 until December 2020," the press release said. "FHKC temporarily shut down the website and databases in December 2020."

Types of information that may have been exposed include:

  • Full Name and Date of Birth
  • Email Address and Telephone Number
  • Physical Address and Mailing Address, if different
  • Social Security Number
  • Financial Information, to include wages, alimony, child support, royalties, other income, and tax deductions
  • Family relationships of those individuals included on the Florida KidCare Application (i.e. mother of child, sister/brother of applicant, etc.)
  • Secondary Insurance Information

FHKC said that the potential exposure of personal information dates back to November 2013.

The company also said that they are committed to preventing future breaches and transitioning to a new website.

To find out more information about the breach, you can click here. People can also email questions to privacyofficer@healthykids.org, or call 1-888-540-KIDS (5437) Monday-Friday from 7:00 am–7:00 pm EST.