DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

NYC: 15,000 Social security numbers stolen from state computers by subcontractor

Posted on December 15, 2010 by Dissent

Thousands of Social Security numbers have been stolen from the computers of a New York state agency.

The Social Security Administration in New York City says that the Social Security numbers were stolen by a subcontractor who was working in Office of Temporary Disability Assistance making computer infrastructure upgrades. The administration says, while performing the upgrades, the contractor illegally downloaded around 15,000 Social Security numbers from computers belonging to private contractors working for the agency.  The agency decides Social Security disability claims.

Read more WNYT.

In a press release issued December 10, Michael J. Astrue, Commissioner of Social Security, said:

I learned earlier this week about the arrest of an individual alleged to have illegally downloaded personal information of about 15,000 people from computers belonging to private contractors working for the New York state agency that decides some initial disability claims for Social Security. This individual is in custody, and we continue to work with law enforcement to determine exactly what information was downloaded and the risk to the persons involved.

Thanks to the quick and skillful response of the New York State Police, it appears that illegal use of the downloaded information only occurred in a limited number of cases; however, the investigations are ongoing and we do not know the extent of the damage. As soon as we identify the individuals whose information was compromised, we will notify them, offer them free credit monitoring, and provide them with a special toll-free telephone number to call for assistance.

I asked Social Security’s Inspector General to undertake an investigation and audit, and to work closely with the New York State Police. I appreciate the continued cooperation of the State of New York and will ask the appropriate authorities to prosecute every responsible individual.

New York State Police Acting Superintendent John P. Melville stated:

In addition to the insecurity brought directly upon victims, identity theft and computer crimes cost consumers, corporations and government millions of dollars every year. The New York State Police will employ all its expertise and financial and computer crimes resources to investigate and bring to justice anyone who engages in the fraudulent use of stolen personal information.


Related:

  • PowerSchool commits to strengthened breach measures following engagement with the Privacy Commissioner of Canada
  • Two more entities have folded after ransomware attacks
  • Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks
  • Inquiry launched after identities of SAS soldiers leaked in fresh data breach
  • Michigan ‘ATM jackpotting’: Florida men allegedly forced machines to dispense $107K
  • Premier Health Partners issues a press release about a breach two years ago. Why was this needed now?
Category: Breach IncidentsGovernment SectorID TheftSubcontractorTheftU.S.

Post navigation

← California public health dept. announces lost tape had medical and personal info on residents and workers
Being kept in the dark is a global problem →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
  • Hacker group “Silent Crow” claims responsibility for cyberattack on Russia’s Aeroflot
  • AIIMS ORBO Portal Vulnerability Exposing Sensitive Organ Donor Data Discovered by Researcher
  • Two Data Breaches in Three Years: McKenzie Health
  • Scattered Spider is running a VMware ESXi hacking spree
  • BreachForums — the one that went offline in April — reappears with a new founder/owner
  • Fans React After NASCAR Confirms Ransomware Breach
  • Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack (1)
  • Infinite Services notifying employees and patients of limited ransomware attack
  • The safe place for women to talk wasn’t so safe: hackers leak 13,000 user photos and IDs from the Tea app

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Congress tries to outlaw AI that jacks up prices based on what it knows about you
  • Microsoft’s controversial Recall feature is now blocked by Brave and AdGuard
  • Trump Administration Issues AI Action Plan and Series of AI Executive Orders
  • Indonesia asked to reassess data privacy terms in new U.S. trade deal
  • Meta Denies Tracking Menstrual Data in Flo Health Privacy Trial
  • Wikipedia seeks to shield contributors from UK law targeting online anonymity
  • British government reportedlu set to back down on secret iCloud backdoor after US pressure

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.