[BreachExchange] Adams County data breach exposed personal information of up to 250, 000 people

Destry Winant destry at riskbasedsecurity.com
Mon Aug 13 07:55:40 EDT 2018


https://www.wisconsinrapidstribune.com/story/news/2018/08/10/adams-county-data-breach-exposed-information-up-250-000-people/956200002/

ADAMS COUNTY - A data breach exposed the names, addresses, personal
information and even photographs of more than 250,000 people with
information on Adams County computer systems.

Officials in a statement on Friday said they do not have evidence that
personal data was stolen, but urged those affected by the breach to
take steps against possible identity theft as a precaution.

Investigators detected questionable activity on the county computer
system and network in March, and confirmed the breach in late June,
according to a statement from Adams County.

On June 29, investigators reported one or more suspects breached the
network on Adams County's computer system with access to personal
identification information, health information and tax information for
258,120 people with information in a system that included multiple
offices. The suspect or suspects accessed information from multiple
departments including the Veterans Service Office, Health and Human
Services, Child Support and the Sheriff’s Office between Jan. 1, 2013
and March 28, 2018.

One or more unauthorized suspects accessed rights, user names and
passwords by using software programs on the county’s computer network
and a system that allowed them more access than they were authorized
to see.

While evidence shows someone accessed the information, it doesn't look
like the information was taken or used, or that any identities were
stolen, officials said.

According to the release, police continue to investigate the crime and
have identified one or more suspects. Adams County suspended their
accounts and they no longer have any access to the system. Officials
disabled all manipulating software, as well.

Information that could have been accessed includes name, address,
birthday, telephone number, fax number, email, Social Security number,
medical record number, health plan beneficiary number, license number,
license plate numbers, fingerprints, full-face photos and more.

“Adams County respects the privacy of your information and takes very
seriously our role in safeguarding your information,” said Casey
Bradley, Adams County manager and administrative coordinator, in the
letter. “We regret that this incident occurred and apologize for any
inconvenience this matter has caused. We will continue to do
everything we can to correct this situation and fortify our
operational protections for you and others.”

If your data was breached

A notification letter on the Adams County website gives information to
everyone affected by the data breach.

- Officials suggest people register a fraud alert with Experian,
TransUnion or Equifax – credit bureaus that people can use to order
credit reports.

- People can also order a free annual credit report from
www.annualcreditreport.com or by calling 877-322-8228.

- Officials also suggest monitoring bank, credit card and other
account statements closely. If there is suspicious activity, cancel
all credit cards and request new ones and notify your bank or credit
union where the cards are from.

- If you suspect fraud or identity thefwww.annualcreditreport.com,
contact the police, your state attorney general and/or the Federal
Trade Commission at ftc.gov/idtheftor 877-438-4338, the letter said.

For more information, or to contact Adams County with questions and
concerns, contact Bradley at 833-236-0173 between 8 a.m. and 4:30
p.m., send an email to databreach at co.adams.wi.us or send a letter to
P.O. Box 102 in Friendship, WI 53934.


More information about the BreachExchange mailing list