Notice of HIPAA Breach

​Published January 30, 2025

What happened?

In November 2024, the Maryland Department of Health’s (MDH) Records Management Office received a request from an individual for a copy of their records from Rosewood State Hospital. The Records Management Office provided the individual with their records on November 25, 2024. On December 4, 2024, the Records Management Office discovered that the records contained information for other patients. These documents were patient records related to approximately 50 individuals who were patients at Rosewood State Hospital (formerly Rosewood State Training School) between April 1960 and March 1961.

What information was involved?

One or more of the following personal types of information may have been involved: name, sex, race, date of birth, patient identification number, and discharge date. 

How did MDH handle this?

The Records Management Office immediately reached out to the individual who received the records and requested that they delete any copies of the records in their possession. The individual confirmed that all copies of the records were deleted. 

Do you need to do anything?

​We do not believe the information shared is sufficient for someone to steal your identity or impact your credit. However, if you are concerned, you may find information on actions you can take to protect yourself by contacting the following agencies:

​Federal Trade Commission Consumer Response Center
600 Pennsylvania Avenue, NW
Washington, DC 20580
www.ftc.gov/IDTHEFT
1-877-IDTHEFT (438-4338)

​Maryland Attorney General’s Office Identity Theft Unit
200 St. Paul Place, 25th Floor
Baltimore, Maryland 21202
​1-410-576-6491
1-888-743-0023
idtheft@oag.state.md.us
www.marylandattorneygeneral.gov

You can also obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting https://www.annualcreditreport.com, calling toll-free 1-877-322-8228, or by completing an Annual Credit Report Request Form.pdf and mailing it to the Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. ​

Equifax​
P.O. Box 740241
Atlanta, GA 30374
1-866-349-5191
www.equifax.com

Experian
P.O. Box 2002
Allen, TX 75013
1-888-397-3742
www.experian.com

TransUnion
P.O. Box 1000
Chester, PA 19016
1-800-680-7289
www.transunion.com

Need more information? 

If you have any questions or need additional information, please contact IAC/S at 410-767-5314, 1-877-463-3463 or mdh.iac@maryland.gov.  ​

For more information about HIPAA, click here​

MDH Office of Internal Controls, Audit Compliance & Information Security​ (IAC/S)

201 W. Pre​​ston Street
Baltimore, MD 21201
410-767-5314 office 
410-333-7194 fax