A Michigan Auditor General report says the Michigan Children's Institute kept an unencrypted database on more than 17,000 past and present state wards on a shared drive that 626 employees outside the unit could view and edit, and did not know who had access. MDHHS told TDFP it has moved the database and is implementing annual access reviews, but did not say when the migration finished or whether any records were viewed without a work-related need.