{"id":82789,"date":"2017-02-04T11:22:37","date_gmt":"2017-02-04T16:22:37","guid":{"rendered":"http:\/\/rbachnet.wwwmi3-ss40.a2hosted.com\/index.php\/"},"modified":"2021-08-10T19:10:46","modified_gmt":"2021-08-10T23:10:46","slug":"state-of-michigan-data-breach","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/state-of-michigan-data-breach\/","title":{"rendered":"State of Michigan Data Breach"},"content":{"rendered":"

\"State<\/a>Data breaches<\/strong> are no surprise these days. I have covered a number of data breaches here on the Bach Seat<\/a><\/em> here<\/a>, here<\/a>, and here<\/a>. Now the State of Michigan<\/strong><\/a> (SOM) has joined the ranks of data leakers like Yahoo<\/a>, Home Depot<\/a>, Target<\/a>, BCBS<\/a>, and the US government<\/a>. MLive<\/a><\/em> is reporting<\/a> that the State of Michigan has spilled the personal data of millions of Michigan citizens<\/strong>. On February 03, 2017, the Michigan Department of Technology Management and Budget<\/a> (DTMB) announced the Michigan data breach. The breach leaked the Personal information of nearly 20% of Michigan residents who were vulnerable to unauthorized access for four months<\/strong>.<\/p>\n

Unemployment Insurance Agency<\/h3>\n

\"Unemployment<\/a>The article reports that in October 2016, a software update to the Michigan Data Automated System<\/a><\/strong> (MiDAS) system was used by the state’s Unemployment Insurance Agency (UIA)<\/a>. MiDAS was created by Fast Enterprises<\/a> of Centennial, CO, and went live in 2012 as part of a modernization of the unemployment benefits and tax system. A flaw allowed employers and human resources firms to get access to names and social security numbers<\/strong> of nearly 1.9 million Michigan residents they were not authorized to view.<\/p>\n

The state identified the Michigan data breach on Jan. 30 and fixed it on Jan. 31, 2017. Contracted payroll service providers<\/strong> had unauthorized access to the MiDAS system, according to UIA spokesperson Dave Murray. Anybody working for a company that uses one of those payroll service providers may have had their personal information compromised. DTMB official Caleb Buhs warned, “If you are an employee in Michigan and your company uses a payroll vendor to process payroll, then you can potentially be included.<\/em>”<\/p>\n

Impacted by the Michigan data breach<\/h3>\n

\"\"<\/a>According to a report<\/a> on MLive,<\/em> the 31 vendors<\/strong> with unauthorized access to Michigan citizens’ PII<\/a><\/strong> included:<\/p>\n