Nassau County

More than 200 current and former employees in the Assessment Department of Nassau were notified of the personal data breach.

Some of the co-workers gained unauthorized access to human resources information about department workers and stole information.

The compromised information included Social Security numbers, medical notes, and other personally-identifying information.

Source: https://www.databreaches.net/ny-nassau-notifies-209-workers-their-confidential-personal-data-may-have-been-breached-by-employees/

TPRM report: https://scoringcyber.rankiteo.com/company/nassau-county

"id": "nas145012522",
"linkid": "nassau-county",
"type": "Breach",
"date": "02/2022",
"severity": "80",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'Nassau',
                        'name': 'Nassau Assessment Department',
                        'type': 'Government Department'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'medical notes',
                                              'other personally-identifying '
                                              'information']},
 'description': 'More than 200 current and former employees in the Assessment '
                'Department of Nassau were notified of the personal data '
                'breach. Some of the co-workers gained unauthorized access to '
                'human resources information about department workers and '
                'stole information. The compromised information included '
                'Social Security numbers, medical notes, and other '
                'personally-identifying information.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'medical notes',
                                 'other personally-identifying information']},
 'motivation': 'Data Theft',
 'threat_actor': 'Insider Threat',
 'title': 'Personal Data Breach at Nassau Assessment Department',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Resources Information Access'}