Cyber Incident Victim: Maryland Department of Labor
Date:
Jul 2019
Location:
United States of America
Summary
A Maryland government agency experienced a data breach exposing sensitive personal information of approximately 78,000 individuals, including names, Social Security numbers, dates of birth, and residency details. The unauthorized access affected two systems: a literacy program database containing records from multiple years and an older unemployment insurance database. An internal investigation found no evidence that the compromised data was downloaded or misused. The agency engaged independent security experts, notified law enforcement, and implemented countermeasures to prevent future incidents. Impacted individuals were offered two years of complimentary credit monitoring services and provided a dedicated contact channel for enrollment assistance. Officials emphasized ongoing vigilance against sophisticated cybersecurity threats while urging affected parties to monitor their accounts.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 5, 2019, the Maryland Department of Labor (DoL) disclosed a data breach impacting approximately 78,000 individuals. Unauthorized access occurred to two systems: the Literacy Works Information System (LWIS) and a legacy unemployment insurance service database. The LWIS files involved were from 2009, 2010, and 2014, potentially exposing first names, last names, social security numbers, dates of birth, city or county of residence, graduation dates, and record numbers. The unemployment insurance database files dated to 2013 and contained first names, last names, and social security numbers. Maryland’s Department of Information Technology (DoIT) launched an investigation but found no evidence that personally identifiable information was downloaded or extracted from the servers. The department initiated internal security breach protocols, implemented countermeasures, and engaged an independent security expert alongside law enforcement agencies.
Affected individuals were notified of the incident and offered two years of free credit monitoring through Experian’s IdentityWorks. Enrollment instructions were distributed via mail, with a dedicated hotline (410-767-5899) and email address ([email protected]) available for inquiries during business hours. Acting Labor Secretary James E. Rzepkowski publicly acknowledged the sophistication of modern cybersecurity threats and emphasized the department’s commitment to safeguarding customer data. While no misuse of the exposed information was confirmed, the DoL advised impacted individuals to monitor their accounts for unusual activity. The breach’s scope was confined to historical records, with no indication of ongoing system compromise or data exfiltration beyond initial unauthorized access. Remediation efforts focused on securing affected systems and providing compensatory protections to those at potential risk.