Government system glitch exposes identities of thousands of vulnerable Kentuckians

KENTUCKY (FOX 56) — A state government system “glitch” exposed new identities of more than 2,400 people protected by the Cabinet for Health and Family Services (CHFS).

“One thing that you expect when you provide this kind of information to the government is that this is going to be protected,” said Kentucky State Auditor Allison Ball. 

The glitch happened within the CHFS system, and many of the names were sent to former households after the affected individuals moved out of their homes to escape dangerous situations. Many of the people impacted are adopted children, but could also include people who left a domestic violence situation. 

“We got a notification from a mom, and she told us that her adopted children had new names after they’d been adopted, and then their biological mother had been notified of their names as well as where they lived now,” Ball said. “You’ve actually just given somebody not only the name of who they are, but also where they’re located.”

Within the State Auditor’s office is the Office of the Ombudsman, which is responsible for investigating complaints about CHFS. 

“Our letter to them was, ‘What are you going to do to notify these people?’ And we haven’t received an answer yet, and CHFS made a statement that they don’t have intentions to notify anybody,” added Ball. “So that’s why we have stepped in, and we want to know what your plans are now?”

We reached out to CHFS for comment; a spokesperson said, “We learned about a flaw in the system that appears to date back to 2013. Through this flaw, those who had a name change within the eligibility and enrollment system may, but did not necessarily, generate a notice that could have gone to former parents or guardians.”

“At this moment, the situation you originally referenced is the only known instance, but the cabinet is diligently analyzing how many cases could’ve theoretically happened and if anyone else could be similarly impacted. The cabinet is going through each and every instance these were issued to see if any other child was actually impacted,” the statement continued.

Ball said the first step for CHFS should be to notify all individuals, informing them of their potential risk.

She also added, “I would like to have some assurances beyond just the ‘Yes, we’re taking care of it.’ I’d like to know what they have done to remedy the situation.”