Minnesota Department of Human Services suffered a data breach that may have exposed the personal information of about 11,000 people.
The state Department of Human Services notified lawmakers Tuesday the incident. Attackers had access to an employee’s e-mail account on or about March 26, 2018.
“The hacker would have had the ability to view, download, or otherwise obtain some of the account’s contents during this
The hacker unlawfully logged into a state e-mail account of an employee and used it to send two e-mails to the employee’s co-workers, asking them to pay an “invoice” by wiring money.”
The attack was immediately detected and reported to Minnesota IT Services.
At the time is not possible to determine what, if any, information was accessed by the attacker, the agency pointed out that it has no evidence that personal information contained in the hacked e-mail account was “viewed, downloaded or misused in any way.”
This incident is the third data breach in just over a year suffered at DHS, it also demonstrates the great interest in government agencies of various threat actors.