Department of Labor details response to cybersecurity incident (MD)

From Staff Reports | Jul 8, 2019

BALTIMORE — The Maryland Department of Labor on July 5 began notifying 78,000 customers with details about potential unauthorized activity on two of its database systems.

While some personally identifiable information may have been accessed without authorization, a thorough investigation conducted by the Department has not revealed any misuse of the accessed data.

Earlier this year, at the request of the Maryland Department of Labor, the Maryland Department of Information Technology — the agency overseeing all state information technology functions and policies — initiated an investigation and determined that files stored on the Literacy Works Information System and a legacy unemployment insurance service database were subject to possible unauthorized access through the internet.

Upon notification of the possibility of unauthorized access, Maryland DoIT implemented countermeasures and initiated an investigation. Working with the Department of Labor, Maryland DoIT also notified law enforcement and retained an independent expert to investigate how the information was accessed.

A full review of the department’s protocols and security measures has been completed to prevent future incidents. To date, this investigation has not produced evidence to confirm that any personally identifiable information was downloaded or extracted from Labor servers.

With this investigation now complete, the Department of Labor is contacting the customers who were impacted by the incident and encouraging them to carefully monitor their accounts. Those who have been affected will be offered two years of free credit monitoring through an independent service.

(Read More)