The Washington State Health Care Authority (HCA) reports personal identification information and private health information for 91,000 Apple Health (Medicaid) clients was handled improperly by an employee.

Tuesday, HCA sent a letter to clients affected by the breach. Affected information includes social security numbers, dates of birth, Apple Health client ID numbers and private health information.

“Our first and foremost priority is protecting our clients’ personal information,” said HCA Risk Manager Steve Dotson. “We have taken swift action to address this issue and help prevent future incidents. I know this is stressful and concerning for those impacted, and we are doing everything possible to support them.”

Two state employees in two agencies exchanged client files, violating requirements outlined by the Health Insurance Portability and Accountability Act (HIPAA).

Both employees say the data was not used for unauthorized purposes. Both employees have been fired.

If you may have been affected, you can visit this web page for more information. HCA has also set up free credit monitoring for one year for impacted clients and a toll-free number to answer questions: 1-877-866-9702.

HCA has also conducted an internal investigation to find out exactly what information was compromised and how to best address it.

HCA covers more than 1.8 million Washington residents through the Apple Health program, which provides free health care to individuals with low incomes.