The Minnesota Department of Human Services says a data breach may have exposed the personal information of up to 3,000 people after an employee fell for a phishing scam and clicked on a malicious link last September.

KTOE’s Annette Weston has more in this report: