LANSING, Mich. – A potential release of personal identifiable information processed by a third-party vendor was identified by the Department of Technology, Management and Budget and the Unemployment Insurance Agency.
According to the DTMB, a software update implemented in October introduced a vulnerability that allowed authorized users of the Michigan Data Automated System to access Social Security numbers and names. The authorized users who potentially had access only include employers and other human resources professionals, not unemployment claimants or the general public.
Recommended Videos
The problem was identified on Jan. 31.
“Data security is a top priority for the state of Michigan,” said DTMB director and state CIO David Behen. “we will work with our third party vendors and our state team to review our processes and procedures to avoid incidents like this in the future.”
They say the total number of people affected will not be known until an investigation is finished. People potentially at risk include those whose payroll is processed by one of 31 third-party vendors that works with the Unemployment Insurance Agency.
There is no indication that the potentially exposed information has been or will be used for malicious purposes, according to DTMB.
The Michigan State Police Cyber Command Center is investigating.