Cook County PHHS reports completed investigations, data breach notifications and staffing shortfalls; director search under way

Cook County Public Health Human Services leaders updated the board Sept. 16 on completed investigations, a recent data breach, time‑reporting shortfalls and the status of recruiting for several vacant positions, including the permanent director role.

Administrator Bridal (PHHS administrator) told the board that all investigations prompted by grievances or complaints have been completed and that the agency is taking steps to address findings across four categories: policies and procedures, revenue and expenses, client services and work conditions. Bridal said the department will work with two external consultants and the county attorney’s office to implement corrective actions.

Data breach, client notification and controls

Bridal reported a data breach affecting 48 clients. She said letters have been mailed and that some have been returned; PHHS staff are actively tracing addresses and ensuring each affected person receives a notice. Bridal said the department is updating policies and system controls to mitigate future breaches and that consultants will assist with aligning social service information system (SSIS) controls to best practices.

Billing, SSIS time reporting and internal controls

Bridal said SSIS time reporting is required and that the agency currently requires 90% “real‑time” reporting. Investigations found that the 90% expectation was not consistently met, which affects the agency’s ability to collect reimbursements because accurate time entries are necessary for billing. Bridal said the agency anticipates moving to a 100% real‑time reporting policy and will deploy training and controls to support staff in meeting the standard.

Flex funds and other administrative weaknesses

Bridal identified gaps in written policy and controls for flex funds (local goods or services paid to meet clients’ needs, e.g., clothing, food or auto repair) and said policy and controls will be implemented.

Staffing, recruiting and compliance posture

Plomin (interim director) and Bridal told the board the department is meeting statutory requirements but at a cost: staff are wearing multiple hats and covering vacant roles. Plomin said he will not apply for the permanent director position; the director posting closes the day after the meeting and first‑round interviews are planned the following week. Several critical positions (adult mental health case manager, home and community‑based services supervisor, children and family services case manager) are under active recruitment.

Plomin credited recently contracted consultants (including an external behavioral health consultant approved by the board) with helping the agency remain compliant during the transition. Commissioner Gamble asked whether open positions had created compliance risk; Bridal and Plomin answered that the county is meeting requirements but noted that durability depends on filling vacancies and strengthening organizational supports.

Other items

Bridal said the wilderness treatment program audit findings have been resolved and that the state provided an “all clear” after the department worked with the county attorney’s office and staff to address the findings.

Board direction and next steps

The board asked staff to continue prioritizing compliance, improve SSIS time‑entry support and provide updates on hiring and implementation of policy changes. Bridal and Plomin said they will work with consultants to design staff training and a timeline for implementing policy and internal‑control improvements.