Oregon Department of Revenue

An employee at Oregon's tax collection agency copied the data of 36,000 people, including social security numbers, and stored the files to a personal account.

The Department of Revenue detected the breach and moved quickly to remove the files from the employee's cloud account.

There was no evidence that anyone other than the state employee viewed or otherwise accessed the files.

The data breach did not include taxpayers' bank account information, because the files were related to a list of individuals who paid their taxes using checks and turned out to have insufficient funds.

The tax agency may require additional identity validation from affected taxpayers when they file their returns this year, and the state will provide identity theft recovery services to them.

Source: https://www.oregonlive.com/politics/2018/03/oregon_tax_agency_employee_cop.html

"id": "ORE144110622",
"linkid": "oregon-department-of-revenue",
"type": "Data Leak",
"date": "03/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"