North Dakota Workforce Safety & Insurance

The North Dakota Workforce Safety & Insurance agency was a victim of a cybersecurity attack.

Attack involved personal data.

A Workforce Safety & Insurance employee noticed unusual activity on their computer after opening an email attachment and reported the incident to the internal help desk.

The computer was secured and removed from the state network..

WSI immediately contacted North Dakota Information Technology, which referred the incident to the NDIT Cyber Analysis and Response team.

The sophisticated phishing attack was isolated to a single computer and did not spread to the state network.

The emails contained personal information of 182 injured employees.

Source: https://www.inforum.com/news/north-dakota/cyberattack-targets-north-dakota-workforce-safety-insurance-data

TPRM report: https://scoringcyber.rankiteo.com/company/workforce-safety-&-insurance

"id": "nor1916281022",
"linkid": "workforce-safety-&-insurance",
"type": "Cyber Attack",
"date": "08/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Public Sector',
                        'location': 'North Dakota',
                        'name': 'North Dakota Workforce Safety & Insurance',
                        'type': 'Government Agency'}],
 'attack_vector': 'Email Attachment',
 'data_breach': {'number_of_records_exposed': 182,
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': 'Personal information'},
 'description': 'A sophisticated phishing attack compromised personal data of '
                'injured employees.',
 'impact': {'data_compromised': 'Personal information of 182 injured employees',
            'systems_affected': ['Single computer']},
 'initial_access_broker': {'entry_point': 'Email Attachment'},
 'investigation_status': 'Isolated to a single computer',
 'post_incident_analysis': {'root_causes': 'Human error (opening malicious '
                                           'email attachment)'},
 'response': {'containment_measures': ['Computer secured and removed from the '
                                       'state network'],
              'incident_response_plan_activated': True},
 'title': 'Cybersecurity Attack on North Dakota Workforce Safety & Insurance',
 'type': 'Phishing Attack',
 'vulnerability_exploited': 'Human error (opening malicious email attachment)'}