Nathan of KPPA's office of legal services told the audit committee there were 12 investigations into potential data disclosures, including four incidents involving 53 member self‑service account accesses and one open‑records release that exposed 40 employee payroll records; no HIPAA or state‑law violations were found, and no benefits were affected.

Office of Legal Services reported 12 investigations into potential data disclosures since the prior meeting, including four incidents of unauthorized access attempts affecting 53 member self‑service accounts and an open‑records release that exposed payroll information for 40 employees.