Court Data Breach Could Affect Up To 1 Million In Washington State

[Erica Absetz <erica () riskbasedsecurity com>]

http://www.seattlemedium.com/news/Article/Article.asp?NewsID=115189&sID=4&ItemSource=L

OLYMPIA -- The Washington State Administrative Office of the Courts
(AOC) recently announced that a data breach occurred recently on its
public website. According to AOC, no court records were altered and no
financial data was maintained on the site. However, it has been
confirmed that 94 social security numbers were obtained. There is also
the potential that up to 160,000 social security numbers and 1 million
driver license numbers may have been accessed as well.

The breach was discovered in February. While a large amount of data
was downloaded from the Washington Courts website at
www.courts.wa.gov, initial indications were that only non-confidential
information was obtained.

Upon continued investigation, with the assistance of the Multi-State
Information Sharing and Analysis Center (the key resource designated
by the U.S. Department of Homeland Security for cyber threat
prevention response and recovery for state, local and tribal
governments), AOC recently determined that 94 individual social
security numbers were accessed, with a potential for up to 160,000
additional social security numbers and up to 1 million driver license
numbers being accessed. For those 94 individuals whose social security
numbers were accessed, AOC is in the process of notifying them via
letter.

In certain instances, driver license numbers are a part of court case
record files and a part of the public record. Because they can be
utilized as a personal identifier, however, precautions should be
taken to monitor credit.

Individuals meeting the following criteria could potentially be
affected by the breach:
Social security numbers:
• If you were booked into a city or county jail within the state of
Washington between September 2011 through December 2012, you may have
had your name and social security number accessed.

Driver license numbers:
• If you received a DUI citation in Washington State between 1989 through 2011;

• If you had a traffic case in Washington State filed or resolved in a
district or municipal court between 2011 through 2012;

• If you had a superior court criminal case in Washington State that
was filed against you or resolved between 2011 through 2012, you may
have had your name and driver license number accessed.

A website detailing further information about the breach, common
questions and assistance has been setup at
www.courts.wa.gov/databreach. A hotline has also been setup to answer
questions from the public at 1-800-448-5584, from 8 a.m. to 8 p.m.
Monday - Saturday.

“We regret that this breach has occurred and we have taken immediate
action to enhance the security of these sites,” said Washington State
Court Administrator Callie T. Dietz.

The public should be aware that no one from the Administrative Office
of the Courts, or any court in Washington State, will be asking for
personal information over the phone or via e-mail regarding this
incident.
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges.