The Georgia Department of Community Health said that a CD containing the names, birth dates and Social Security numbers of 2.9 million Medicaid recipients went missing while it was being transported by a private carrier.
Dena Brummer, press secretary for state health agency, said she was not aware whether the information on the disk was encrypted, and could not say whether the data loss would effect her agency's data handling practices in the future.
Brummer said she did not know the name of the transportation company that was shipping the disk at the time it was lost, but said the data loss is being investigated by Affiliated Computer Services (ACS), a private vendor hired by the state to process health care claims.
"ACS is responsible for how it was shipped and who it was shipped to," she said. "Right now, our energy has been focused on getting the information out to members and we've instructed ACS to do that."
Calls to ACS were not immediately returned.
Find your next job with computerworld UK jobs