New York state health exchange scrambles to fix glitch that makes private user data publicly available

Listen
Text
  • Small
  • Medium
  • Large

New York State Department of Health exchange website users may have had their personal information, including birth dates, addresses, phone numbers, email addresses and partial Social Security numbers compromised over the weekend of May 7, according to CBS6 Albany.

One user alerted the news outlet that when he logged in to the website, he was able to see the private information of another user. After CBS6 notified the New York State Department of Health, the website was temporarily taken offline, CBS6 reports.

The site was back up as of Tuesday morning. Although the user who brought the breach to the attention of CBS6 stated he could see the last four digits of another user's Social Security number, a representative from the health department maintains such information was not visible.

"Security is a top priority. Monitoring and testing occurs on an on-going basis which is how the problem was originally detected and swiftly resolved," a New YorkState health department representative told CBS6 in an emailed statement. "No health information, Social Security numbers or enrollment information was displayed."

An attorney is investigating to determine whether a data breach in fact occurred, according to CBS6.

Copyright © 2021 Becker's Healthcare. All Rights Reserved. Privacy Policy. Cookie Policy. Linking and Reprinting Policy.

 

Featured Whitepapers

Featured Webinars