The social security numbers and other personal information about 85 jail inmates of Vilas County Jail were compromised in a data breach after a new corrections employee posted the wrong report on the county’s website.
The exposed information included the Social Security numbers and other personal information, so the Vilas County offered one year free monitoring serice to affected inmates.
The corrective actions are taken against the employee after the incident.
Source: https://www.twincities.com/2016/02/22/wisconsin-jail-inmates-credit-monitoring/
TPRM report: https://scoringcyber.rankiteo.com/company/vilas-county
"id": "vil234114522",
"linkid": "vilas-county",
"type": "Breach",
"date": "01/2016",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 85,
'industry': 'Corrections',
'location': 'Vilas County',
'name': 'Vilas County Jail',
'type': 'Government'}],
'attack_vector': 'Human Error',
'data_breach': {'number_of_records_exposed': 85,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'Other Personal Information']},
'description': 'The social security numbers and other personal information '
'about 85 jail inmates of Vilas County Jail were compromised '
'in a data breach after a new corrections employee posted the '
'wrong report on the county’s website.',
'impact': {'data_compromised': ['Social Security numbers',
'Other Personal Information']},
'lessons_learned': 'Corrective actions are taken against the employee after '
'the incident.',
'post_incident_analysis': {'corrective_actions': 'Corrective actions are '
'taken against the employee '
'after the incident.',
'root_causes': 'Human error by a new corrections '
'employee'},
'response': {'remediation_measures': 'Offered one year free monitoring '
'service to affected inmates'},
'threat_actor': 'Internal Employee',
'title': 'Data Breach at Vilas County Jail',
'type': 'Data Breach',
'vulnerability_exploited': 'Improper Data Handling'}