Hack attack exposes data for 181,000 Utah benefits recipients
The personal data belonging to more than 181,000 Utah residents who receive state benefits has been stolen by hackers who exploited a configuration error in a server maintained by the state’s Department of Technology Services.
The attack, believed to have been carried out by hackers from Eastern Europe, affects 181,604 recipients of the state’s Medicaid and Children’s Health Insurance Plan benefits, according to an advisory posted late Friday. More than 25,000 of those people had their social security numbers taken, in addition to other information included in claims forms.
"In this particular incident, a configuration error occurred at the authentication level, allowing the hacker to circumvent the security system," the advisory, issued by the Utah Department of Department of Health, stated. "DTS has processes in place to ensure the state’s data is secured, but this particular server was not configured according to normal procedure."
An earlier advisory said the attackers are believed to be from Eastern Europe, but it didn’t elaborate. Utah’s Department of Health is in the process of notifying those affected and plans to provide them will free credit monitoring services for one year.