Dakota County

Dakota County suffered a data security incident that involved protected health information maintained by the Dakota County Social Services Department.

An email account belonging to one of its employees was accessed without authorization which comprised private information belonging to approximately 1,000 current and former clients of Dakota County.

The private information included names, addresses, driver’s license numbers, Social Security numbers, health insurance information, and/or medical history, treatment, or diagnoses information.

Source: https://www.databreaches.net/mn-dakota-county-notifies-1000-clients-after-employee-email-account-hacked/

TPRM report: https://scoringcyber.rankiteo.com/company/dakota-county

"id": "dak231713123",
"linkid": "dakota-county",
"type": "Data Leak",
"date": "04/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Approximately 1,000 current and '
                                              'former clients',
                        'industry': 'Public Services',
                        'location': 'Dakota County',
                        'name': 'Dakota County Social Services Department',
                        'type': 'Government'}],
 'attack_vector': 'Unauthorized Access to Email Account',
 'data_breach': {'number_of_records_exposed': 'Approximately 1,000',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Addresses',
                                              'Driver’s License Numbers',
                                              'Social Security Numbers',
                                              'Health Insurance Information',
                                              'Medical History',
                                              'Treatment',
                                              'Diagnoses Information']},
 'description': 'Dakota County suffered a data security incident that involved '
                'protected health information maintained by the Dakota County '
                'Social Services Department. An email account belonging to one '
                'of its employees was accessed without authorization which '
                'comprised private information belonging to approximately '
                '1,000 current and former clients of Dakota County. The '
                'private information included names, addresses, driver’s '
                'license numbers, Social Security numbers, health insurance '
                'information, and/or medical history, treatment, or diagnoses '
                'information.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Driver’s License Numbers',
                                 'Social Security Numbers',
                                 'Health Insurance Information',
                                 'Medical History',
                                 'Treatment',
                                 'Diagnoses Information']},
 'title': 'Dakota County Data Security Incident',
 'type': 'Data Breach'}