New York state health exchange scrambles to fix glitch that makes private user data publicly available

New York State Department of Health exchange website users may have had their personal information, including birth dates, addresses, phone numbers, email addresses and partial Social Security numbers compromised over the weekend of May 7, according to CBS6 Albany.

One user alerted the news outlet that when he logged in to the website, he was able to see the private information of another user. After CBS6 notified the New York State Department of Health, the website was temporarily taken offline, CBS6 reports.

The site was back up as of Tuesday morning. Although the user who brought the breach to the attention of CBS6 stated he could see the last four digits of another user's Social Security number, a representative from the health department maintains such information was not visible.

"Security is a top priority. Monitoring and testing occurs on an on-going basis which is how the problem was originally detected and swiftly resolved," a New YorkState health department representative told CBS6 in an emailed statement. "No health information, Social Security numbers or enrollment information was displayed."

An attorney is investigating to determine whether a data breach in fact occurred, according to CBS6.

More articles on data breaches:

Data breach at Iowa hospital affects 1,620 
Google reports data breach affecting employees stemming from third-party benefits provider 
Healthcare data breaches and where to go from here: 9 report takeaways 

© Copyright ASC COMMUNICATIONS 2019. Interested in LINKING to or REPRINTING this content? View our policies by clicking here.


Top 40 Articles from the Past 6 Months