DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

More details emerge on insider breach at FL Department of Economic Opportunity

Posted on April 18, 2015 by Dissent

More details have emerged on a case reported on this site last week in which a state employee accessed a state database and acquired identity information that she allegedly then sold to others.  News4Jax reports:

According to the Department of Economic Opportunity, one of their employees managed to access the Florida Department of Children and Families‘ Florida ACCESS system.

He (sic) then obtained the names and social security numbers of more than 200,000 people in the DCF system.

Read more on News4Jax, but note that I have not found any other reference to this impacting more than 200,000 people. It’s possible it did, but the court filings and U.S. Attorney’s release talk about 200. Perhaps New4Jax has a seen a statement or obtained information from the DEO that I have not obtained yet. (Update: News-Press.com is also reporting the number as 200,000).

According to court filings examined by DataBreaches.net, Eutsay’s theft of benefits applicants’ personal information was discovered on May 8, 2014 during a search of someone else’s home on an unrelated matter. Law enforcement discovered a printout with the identity information of over 200 people. The printout had been downloaded from the DCF’s ACCESS system on April 18, 2014, and reflected Eutsay’s name and system identification number for the ACCESS System.

According to the affidavit supporting the complaint, signed by Mathew Broadhurst, Special Agent,OLRFI, Eutsay subsequently admitted to law enforcement that she had improperly accessed the database on at least 10 occasions since February, 2014, and had been given $5,000.00 in exchange for the stolen identity information.

As manager of CareerSource South Florida, Eutsay’s job position did not require her to access any personal information on benefits applicants, so all database accesses were outside the scope of her professional duties.

Eutsay was charged with Use of One or More Unauthorized Access Devices to Obtain Anything of Value Aggregating $1,000 Or More, Possession of Fifteen or More Unauthorized Access Devices, Computer Fraud, and three counts of Aggravated Identity Theft.

She is scheduled for trial on June 15, 2015.

Eutstay’s case is linked to United States v. Kyron Jonathon Nedd, also previously noted on this site.

I’ve been unable to find any press release or notice from DEO, and have e-mailed them to request one. This post will be updated if I receive their statement.


Related:

  • Revealed: Afghan data breach after MoD official left laptop open on train
  • Snowflake Loses Two More Bids to Dismiss Data Breach Plaintiffs
  • US company with access to biggest telecom firms uncovers breach by nation-state hackers
  • UK: FCA fines former employee of Virgin Media O2 for data protection breach
  • Former General Manager for U.S. Defense Contractor Pleads Guilty to Selling Stolen Trade Secrets to Russian Broker
  • Alan Turing institute launches new mission to protect UK from cyber-attacks
Category: Government SectorID TheftInsiderU.S.

Post navigation

← Has the Premera breach resulted in tax refund fraud?
NZ: Preliminary review reveals no improper data access to shared online medical records →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.