Dakota County

Dakota County operates within the United States, functioning as a governmental entity responsible for providing public services to its residents. Based on confirmed incident reporting, the county handles sensitive client information as part of its service delivery. This includes managing personal data, protected health information, and other confidential details related to individuals under its jurisdiction. The scope of its operations involves interactions with citizens requiring the collection and processing of highly sensitive identifiers and health records. Services provided necessitate handling Social Security numbers, driver's license details, residential addresses, health insurance specifics, and comprehensive medical histories.

The county's role involves significant responsibility for safeguarding personal data entrusted to it by constituents. An incident occurring on February 13, 2019, demonstrated the sensitivity of the information Dakota County manages. An unauthorized actor successfully compromised an employee email account, leading to the exposure of personal and protected health data belonging to approximately 1,000 individuals. This breach encompassed names, addresses, Social Security numbers, driver's license information, health insurance details, and medical histories. Upon discovering the intrusion, Dakota County implemented immediate security measures including resetting all email account passwords and deploying enhanced authentication protocols to secure its systems. The county engaged cybersecurity experts to investigate the breach and assess its full impact. Notification letters were subsequently sent to all affected clients informing them of the incident and outlining the compromised data types. As part of its response, Dakota County offered complimentary identity protection services and established a dedicated call center to assist impacted individuals. Although no confirmed misuse of the exposed information was reported, the county proactively notified relevant federal health authorities and credit agencies as a precautionary step. This incident underscores the county's involvement in critical data handling and its exposure to cybersecurity threats targeting personal and health information.