Illinois Department of Employment Security

A glitch in a newly launched state system Illinois Department of Employment Security for processing unemployment claims for gig workers publicly exposed personal information for a short time.

For months, people have reported issues accessing the online filing system and getting through by phone because of inadequate technology and agency understaffing.

Personal information for thousands of unemployment applicants on the IDES website, including name, address, Social Security number and unemployment claimant identification information, were compromised.

Source: https://www.chicagotribune.com/coronavirus/ct-pritzker-illinois-unemployment-data-breach-20200517-njjwtky6uvaetj2rln5lhdjy4u-story.html

TPRM report: https://scoringcyber.rankiteo.com/company/illinoisdepartmentofemploymentsecurity

"id": "ill043301222",
"linkid": "illinoisdepartmentofemploymentsecurity",
"type": "Data Leak",
"date": "05/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'Illinois, USA',
                        'name': 'Illinois Department of Employment Security',
                        'type': 'Government Agency'}],
 'attack_vector': 'System Glitch',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'A glitch in a newly launched state system Illinois Department '
                'of Employment Security for processing unemployment claims for '
                'gig workers publicly exposed personal information for a short '
                'time.',
 'impact': {'data_compromised': ['Name',
                                 'Address',
                                 'Social Security Number',
                                 'Unemployment Claimant Identification '
                                 'Information'],
            'systems_affected': ['Online Filing System']},
 'post_incident_analysis': {'root_causes': ['Inadequate Technology',
                                            'Agency Understaffing']},
 'title': 'Data Exposure Incident at Illinois Department of Employment '
          'Security',
 'type': 'Data Exposure',
 'vulnerability_exploited': 'Inadequate Technology and Agency Understaffing'}