DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

MN: Wright County finally notifying residents of data breach due to employee transferring data to his home computer

Posted on December 14, 2018 by Dissent

Courtney Godfrey reports:

Taking work home with you sounds like something a hardworking employee would do, unless that work includes private, sensitive data like it did with one employee in Wright County.


The county knew about the data breach for seven months before notifying possible victims.


It wasn’t until FOX 9 filed a public records request that Wright County notified victims of the data breach.

Now it is seven months after the county became aware that more than 1,000 people were potential victims of the breach.

Read more on Fox9.  It seems that the breach was the employee taking PII home on a USB and then transferring the files/data to his home computer. There’s no report of any misuse or sale or other exposure of the data. 

Update:  KSTP reports that about 72,000 are being notified. And they got the former employee to talk to them (wow!). That individual says that he was an hourly worker and had been told he had to go home, so he took the work with him. He insists he didn’t do anything nefarious with it, but of course, isn’t it possible that his home computer had some malware or compromise at some point? 

No related posts.

Category: Government SectorInsiderU.S.

Post navigation

← Popular avatar app Boomoji exposed millions of users’ contact lists and location data
IE: Health body apologizes for email gaffe exposing email addresses of 200 job applicants →

4 thoughts on “MN: Wright County finally notifying residents of data breach due to employee transferring data to his home computer”

  1. Andrew says:
    December 17, 2018 at 1:49 pm

    I was somebody affected by this. Is it possible that there will be a lawsuit?

    1. Geri otto says:
      December 17, 2018 at 4:43 pm

      Contact [deleted by site admin] attorneys at law I was also affected I called these guys because they specialize in stuff like this and they are contacting me tomorrow because they have heard about it and they’re not sure if they’re taking the caseload on I’m not but you probably should call them they’re in Minneapolis

      Note from DataBreaches.net: I do not allow attorney advertising on this site — even if the info comes from a client or member of the public. — Dissent

    2. Derrick says:
      December 19, 2018 at 9:23 am

      Yes Andrew.
      This type of breach imposes civil damages of no less than $2500 to each individual affected by the breach.
      Since they are using the “ongoing investigation” as the excuse for the delay, and since they are considering the act a theft; there is justification for people to file a suit.
      Some will try to hire attorneys who have represented large companies in the past, and who, in this case, may work on the government’s behalf.
      Dropping the ball and (while you search for it) kick it over to the defendants.
      Good luck.

  2. ritas smith says:
    December 20, 2018 at 5:48 pm

    I’m another person affected by this does anyone know who he was yet

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Air Force Employee Pleads Guilty to Conspiracy to Disclose Unlawfully Classified National Defense Information
  • UK police arrest four in connection with M&S, Co-op and Harrods cyberattacks (1)
  • At U.S. request, France jails Russian basketball player Daniil Kasatkin on suspicion of ransomware conspiracy
  • Avantic Medical Lab hacked; patient data leaked by Everest Group
  • Integrated Oncology Network victim of phishing attack; multiple locations affected (2)
  • HHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with Deer Oaks Behavioral Health for $225k and a Corrective Action Plan
  • HB1127 Explained: North Dakota’s New InfoSec Requirements for Financial Corporations
  • Credit reports among personal data of 190,000 breached, put for sale on Dark Web; IT vendor fined
  • Five youths arrested on suspicion of phishing
  • Russia Jailed Hacker Who Worked for Ukrainian Intelligence to Launch Cyberattacks on Critical Infrastructure

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • How to Build on Washington’s “My Health, My Data” Act
  • Department of Justice Subpoenas Doctors and Clinics Involved in Performing Transgender Medical Procedures on Children
  • Google Settles Privacy Class Action Over Period Tracking App
  • ICE Is Searching a Massive Insurance and Medical Bill Database to Find Deportation Targets
  • Franklin, Tennessee Resident Sentenced to 30 Months in Federal Prison on Multiple Cyber Stalking Charges
  • On July 7, Gemini AI will access your WhatsApp and more. Learn how to disable it on Android.
  • German court awards Facebook user €5,000 for data protection violations

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.