COVID Data Breach Information

On July 28, 2020, Mono County became aware of unauthorized access by a third party into the County’s online COVID-19 statistics database which occurred between the dates of April 2, 2020 and July 24, 2020.  The database contained Personal Health Information (PHI) for individuals who were tested for COVID-19 in Mono County prior to July 24.  The County is providing this notice pursuant to 45 CFR § 164.404 (d)(2)(ii).

The unsecured PHI included date of birth, gender, race, geographic region of residence within the County and COVID-19 test information (but no specific address, name or other identifying information). 

Upon learning of the breach, the County took immediate steps to secure the information such that access from the outside has been successfully and completely prevented since July 28, 2020.

The County does not believe it is necessary for you to take action to protect yourself from additional harm (such as identify theft) because the information potentially accessed did not contain financial data, social security numbers, or other types of information that could lead to identity theft.

If you were tested for COVID-19 in Mono County prior to July 24, 2020, and would like specific information regarding whether your PHI was in fact among the dataset breached please call (844) 794-0142. If you received a mailed notice of breach this notice does not apply to you - please refer to the notice you received in the mail.