More than 200 current and former employees in the Assessment Department of Nassau were notified of the personal data breach.
Some of the co-workers gained unauthorized access to human resources information about department workers and stole information.
The compromised information included Social Security numbers, medical notes, and other personally-identifying information.
TPRM report: https://scoringcyber.rankiteo.com/company/nassau-county
"id": "nas145012522",
"linkid": "nassau-county",
"type": "Breach",
"date": "02/2022",
"severity": "80",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Public Administration',
'location': 'Nassau',
'name': 'Nassau Assessment Department',
'type': 'Government Department'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'medical notes',
'other personally-identifying '
'information']},
'description': 'More than 200 current and former employees in the Assessment '
'Department of Nassau were notified of the personal data '
'breach. Some of the co-workers gained unauthorized access to '
'human resources information about department workers and '
'stole information. The compromised information included '
'Social Security numbers, medical notes, and other '
'personally-identifying information.',
'impact': {'data_compromised': ['Social Security numbers',
'medical notes',
'other personally-identifying information']},
'motivation': 'Data Theft',
'threat_actor': 'Insider Threat',
'title': 'Personal Data Breach at Nassau Assessment Department',
'type': 'Data Breach',
'vulnerability_exploited': 'Human Resources Information Access'}