DES MOINES, Iowa -- Nearly 5,000 people may be been part of a Dallas County, Iowa data breach.
The Iowa Department of Human Services the breach happened back in November when a custodial company emptied boxes containing documents into a dumpster that were supposed to be shredded.
It wasn't discovered until after the dumpster had been emptied.
The Department says Information in the documents could include people's names, mailing addresses, social security numbers, banking information, disability information, medical information, receipt of Medicaid, mental health information, provider information, substance abuse information, illegal drug use information, or prescription drug information.
DHS says it launched an internal investigation in early December once the issue was identified by a social work supervisor.
Officials found that the custodial worker wasn't aware of the confidential nature of paperwork in the boxes and threw it out thinking it was trash.
The Department says it's clarified with it's employees that all confidential paperwork must be secured to ensure confidentiality of its clients, and employees in the office were required to take refresher confidentiality training.
DHS says there are no reports of information being misused.