DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

PA: State Dept. of Corrections notifies employees, inmates of online security incident with third-party vendor

Posted on July 23, 2018 by Dissent

Fox43 reports:

A “security incident” at a third-party vendor may have compromised the personal information of employees, inmates and others involved with the state Department of Corrections, the DOC announced Monday in a press release.

The DOC says it has sent letters to those who may have been affected by the incident, which occurred on April 3 at Accreditation, Audit & Risk Management Security, LLC, a vendor that provides the online system the DOC usses (sic) to conduct, manage, and track audits and inspections related to its accreditation and internal operations.

The DOC it was notified by the vendor on April 9 that employee, inmate, and others’ information may have been compromised. The company reports that its system was accessed without authorization and a portion of the data on the system was exported.

The exact contents of the data remain unknown, but may include individuals’ full names, driver’s license numbers, home addresses, Social Security numbers and/or medical information, the DOC says.

Read more on Fox43.

Category: Government SectorHackSubcontractor

Post navigation

← If you shopped at these 15 stores in the last year, your data might have been stolen
Follow-up: More than 1200 people could receive settlements after Flowers Hospital data breach →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • School Districts Unaware BoardDocs Software Published Their Private Files
  • A guilty plea in the PowerSchool case still leaves unanswered questions
  • Brussels Parliament hit by cyber-attack
  • Sweden under cyberattack: Prime minister sounds the alarm
  • Former CIA Analyst Sentenced to Over Three Years in Prison for Unlawfully Transmitting Top Secret National Defense Information
  • FIN6 cybercriminals pose as job seekers on LinkedIn to hack recruiters
  • Dutch police identify users on Cracked.io
  • Help, please: Seeking copies of the PowerSchool ransom email(s)
  • RCMP thumb drive with informant, witness data obtained by criminals: watchdog
  • Evoke Wellness to Pay $1.9 Million to Settle FTC Claims That They Misled Consumers Seeking Substance Use Disorder Treatment

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Rules Proposed Under New Jersey Data Privacy Act
  • Using facial recognition? Three recent articles of interest.
  • India publishes consent management rules under Digital Personal Data Protection Act
  • Republicans Move A Step Closer To Repealing Protections For Abortion Clinics
  • Democrats introduce bill that aims to protect reproductive health data
  • Don’t Mind If I Do: Montana Says Hands Off Neural Data
  • 23andMe leadership grilled by lawmakers demanding answers about data security amid bankruptcy sale

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.