Chippewa County

Chippewa County operates as a governmental entity within the United States of America. Its functions include managing protected health information (PHI) as part of its operations, specifically within its Human Resources Division. This responsibility involves handling sensitive employee data, indicating involvement in administering health-related benefits or programs for its workforce. The county government processes information such as individuals' names, medical history numbers, prescription details, and prescribing physicians' initials, reflecting its role in safeguarding personal health records.

A significant cybersecurity incident occurred on February 28, 2023, impacting the Human Resources Division. An employee laptop was compromised through unauthorized remote access software, likely installed following suspected phishing activity. This breach resulted in the theft of approximately 25 to 35 megabytes of data containing PHI belonging to 842 individuals. Unauthorized access persisted for roughly five minutes before being detected and mitigated by the county's IT staff. Forensic analysis confirmed the incident was isolated to that single compromised device. While separate cyber incidents affected a dental practice and a hospital, these were distinct events unrelated to the county government's breach involving its employee health data.