A file of Pitkin County containing information related to COVID-19 case investigations and/or contact tracing was inadvertently accessible to potential unauthorized parties on internet.
The affected file contained the some or all of the following information: Name, Address, Date of Birth, Employer, Name of School/Childcare Facility, Underlying Conditions, Test Type, Unique ID, Symptoms, Onset Date.
Pitkin County immediately took steps to remediate this issue to prevent access from the internet.
The county also notified the individuals that were impacted by the breach and offered them credit monitoring and identity restoration services at no cost.
"id": "PIT1617622",
"linkid": "pitkin-countyhr",
"type": "Breach",
"date": "12/2020",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"