The Vermont Department of Labor suffered a breach after it mistakenly mailed the tax forms with personally identifiable information, including names, addresses and Social Security numbers, to the wrong addresses.
Some people who received unemployment benefits were sent 1099-G tax forms that had the correct first name and address of the recipient, but information, including tax identification numbers, for someone else.
Source: https://www.databreaches.net/vermont-labor-dept-facing-personal-info-data-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/vermont-department-of-labor
"id": "ver234231122",
"linkid": "vermont-department-of-labor",
"type": "Breach",
"date": "02/2021",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Public Sector',
'location': 'Vermont',
'name': 'Vermont Department of Labor',
'type': 'Government Agency'}],
'attack_vector': 'Mailing Error',
'data_breach': {'personally_identifiable_information': ['Names',
'Addresses',
'Social Security '
'numbers',
'Tax identification '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information']},
'description': 'The Vermont Department of Labor suffered a breach after it '
'mistakenly mailed the tax forms with personally identifiable '
'information, including names, addresses and Social Security '
'numbers, to the wrong addresses. Some people who received '
'unemployment benefits were sent 1099-G tax forms that had the '
'correct first name and address of the recipient, but '
'information, including tax identification numbers, for '
'someone else.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Social Security numbers',
'Tax identification numbers']},
'post_incident_analysis': {'root_causes': ['Human Error']},
'title': 'Vermont Department of Labor Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Human Error'}