[BreachExchange] Florida woman receives personal information from unemployment claimants via possible DEO email

[Sophia Kingsbury]

https://www.msn.com/en-us/news/crime/florida-woman-receives-personal-information-from-unemployment-claimants-via-possible-deo-email/ar-AANfXji

A Florida unemployment claimant from Riviera Beach said her personal
information was sent to another Florida unemployment claimant, seemingly by
a Department of Economic Opportunity (DEO) representative.

Shannel Nelson of Riviera Beach said she’s missing thousands of dollars in
payments from the DEO and her account is locked. She said she has not
received a payment since April. However, she said she's even more worried
now.

On Wednesday, Nelson received a call from another Florida unemployment
claimant, Wilma Gonzalez.

"I honestly went into panic mode,” Nelson said.

Gonzalez said she received an email from a DEO representative (the account
ends in @deo.myflorida.com) with the personal information of Nelson and
more than a dozen other people, including their names, claimant ID numbers,
last 4 digits of their social security numbers and their email addresses.
Gonzalez then called Nelson on FaceTime.

"Then I showed it to her and she was like, ‘Yeah, all of that is my
information,” Gonzalez said.

Nelson added, "I don’t even understand how the DEO, if it was an accident,
how they could send personal information out to other claimants. That is
crazy and very scary, to know that my information is out there along with
other people’s information is out there, just floating around. It’s really
unacceptable on the part of the DEO. It’s not right."

Gonzalez said she didn’t call anyone else on that list and she isn’t sure
what to do now.

"It's confidential and it should not be out there in the web and the same
way that I pulled out her information, somebody out there could be pulling
my information out and that’s what’s scary,” Gonzalez said.

WPBF 25 News is still awaiting a response from the DEO about this issue.
We’re still waiting to hear back from the DEO about what happened.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20210813/3a6cc808/attachment.html>