There was a hack of two email accounts at the Idaho Transportation Department (ITD).
It potentially exposed the personal information of commercial truckers whose rigs are registered in Idaho, including Social Security and credit card numbers.
One email account that was exposed contained an estimated 318 driver’s license numbers, 400 Social Security numbers, 999 credit card numbers, and 11 bank account numbers.
ITD reported that a single individual’s personal information may be duplicated multiple times in those totals.
Source: https://www.eastidahonews.com/2018/02/itd-email-hack-may-have-exposed-truckers-personal-information/
TPRM report: https://scoringcyber.rankiteo.com/company/idaho-department-of-transportation
"id": "ida18158622",
"linkid": "idaho-department-of-transportation",
"type": "Data Leak",
"date": "02/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Transportation',
'location': 'Idaho',
'name': 'Idaho Transportation Department (ITD)',
'type': 'Government Agency'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': ["318 driver's license numbers",
'400 Social Security numbers',
'999 credit card numbers',
'11 bank account numbers'],
'personally_identifiable_information': ["Driver's license "
'numbers',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ["Driver's license numbers",
'Social Security numbers',
'Credit card numbers',
'Bank account numbers']},
'description': 'There was a hack of two email accounts at the Idaho '
'Transportation Department (ITD), potentially exposing the '
'personal information of commercial truckers whose rigs are '
'registered in Idaho, including Social Security and credit '
'card numbers.',
'impact': {'data_compromised': ["Driver's license numbers",
'Social Security numbers',
'Credit card numbers',
'Bank account numbers']},
'title': 'Hack of Email Accounts at Idaho Transportation Department',
'type': 'Data Breach'}