A configuration mistake has triggered a extended info breach at a Florida County’s drug screening laboratory.
The security incident happened at St. Lucie County’s Drug Screening Lab (SLC Lab), which materials drug testing providers for employment, court docket cases and other purposes.
In a statement released January 20 2022, County leaders reported that a misconfiguration detected in the lab’s web page portal had inadvertently built some of the portal users’ own data obtainable for a lot more than four many years.
Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).
➤ Get Mullvad VPN with 12% Discount
“Upon discovering of this issue, SLC Lab corrected the misconfiguration and right away released an investigation in session with exterior cybersecurity gurus who often examine and assess these kinds of incidents,” said the officials.
“SLC Lab devoted appreciable time and hard work to identify what information might have been obtainable to unauthorized buyers.”
A digital forensic investigation was launched to determine what info experienced been uncovered by error.
The County explained: “SLC Lab found on December 28 2021 that the web-site portal misconfiguration authorized for information to be obtainable to certain portal end users among June 2 2017 and October 13 2021.”
Facts uncovered in the incident incorporated entire names and a single or additional of the next: Social Security figures, dates of birth and minimal lab examination type and consequence information and facts.
“To day, SLC Lab is not informed of any stories of id fraud or improper use of any facts as a direct end result of this incident,” reported the County.
On January 20, the lab started notifying impacted persons of the security incident by letter and encouraging them to enroll in complimentary credit history checking providers. County leaders did not point out how lots of people of St. Lucie County could have had their knowledge compromised.
St. Lucie County spokesman Erick Gill told WPTV that the slip-up impacted no other details in the treatment of the county.
“SLC Lab is dedicated to maintaining the privacy of own info in its possession and has taken several safeguards to safeguard it,” stated Gill.
He included: “SLC Lab continually evaluates and modifies its methods to enrich the security and privacy of the individual data it maintains.”
Some parts of this posting are sourced from:
www.infosecurity-journal.com
BotenaGo Botnet Code Leaked to GitHub