Security notice of unauthorized access to PHI

The North Dakota Department of Health and Human Services (HHS) is providing notice of a security incident that involves protected health information (PHI) of certain Developmental Disabilities service recipients.

On July 21, 2026, the North Dakota Information Technology Department (NDIT) identified a phishing email attack targeting HHS. NDIT acted immediately to stop the phishing email attack.

On Ju…