New WA data breach exposes personal info of 1.6 million people who applied for unemployment

Feb 1, 2021, 11:04 AM | Updated: Feb 2, 2021, 7:25 am

Washington State Auditor Pat McCarthy answers questions on Monday after reporting a data breach may...

Washington State Auditor Pat McCarthy answers questions on Monday after reporting a data breach may have compromised information from 1.6 million people who've filed for unemployment benefits. (TVW screen shot)

(TVW screen shot)

The Washington State Auditor is reporting a December data breach that could have exposed the personal information of 1.6 million Washingtonians who had applied for unemployment benefits in 2020.

Puget Sound Educational District hit with data breach

The breach was of a third-party server used by the auditor’s office, Accellion, and may also have exposed data from local governments and other state agencies.

People who filed for unemployment between Jan. 1 and Dec. 10, 2020, people whose identities were stolen in last year’s fraud attack, or state government employees may have had their information exposed.

“I know this is one more worry for Washingtonians who have already faced unemployment in a year scarred by both job loss and a pandemic. I am sorry to share this news and add to their burdens,” State Auditor Pat McCarthy said in a written release. “This is completely unacceptable. We are frustrated and committed to doing everything we can to mitigate the harm caused by this crime.”

Washington state’s Employment Security Department was defrauded out of hundreds of millions of dollars last spring, impacting nearly 390,000 people whose stolen identities were used to fraudulently apply for unemployment benefits. In the months to follow, the department took criticism for weak internal controls and an out-of-commission automated process that was supposed to flag suspicious claims. The ESD was not responsible for this latest breach, though, says McCarthy.

Audit finds internal controls at ESD weren’t strong enough to prevent fraud

“I want to be clear: This was an attack on a third-party service provider. The Employment Security Department did nothing to cause this, and is not responsible in any way for this incident,” she emphasized.

McCarthy says they have used Accellion for 13 years and thought the security was trustworthy. Other recent attacks on Accellion resulted in data breaches at the Royal Bank of New Zealand and the Australian Securities and Investment Commission.

Law enforcement is investigating the breach.

McCarthy said the full scope of how this has affected people is still under investigation and their office has contacted every state agency that would be impacted, based on the files given by Accellion. She said those agencies already know who they are.

“We have not heard from anyone affected by it, but that doesn’t mean it hasn’t happened,” McCarthy said of claimants.

The auditor’s office has set up a website for people to learn more about the breach and plans to set up a hotline.

The KIRO Radio Newsdesk contributed to this report

MyNorthwest News

Image: A Pierce County Sheriff's Department logo can be seen on an officer at a scene with a police...

Steve Coogan

1 of 2 late-night Tacoma shootings involve sheriff’s deputies

In the second of two overnight shootings in Tacoma, Pierce County Sheriff's Department deputies fired at a suspect early Wednesday.

3 hours ago

Image:The New York Giants' Willie Mays poses for a photo during baseball spring training in 1972. M...

Associated Press

Willie Mays, Giants’ electrifying ‘Say Hey Kid,’ dies at 93

Willie Mays, whose singular combination of talent, drive and exuberance made him one of baseball’s greatest players, has died. He was 93.

15 hours ago

Seattle police tombstone...

Matt Markovich

Timing of former SPD chief coming out raises questions amidst legal, administrative turmoil

The former SPD chief's coming out has some unnamed sources within SPD and members questioning the timing of his announcement.

15 hours ago

Image: Drugs, guns and money were seized as part of a large investigation led by the DEA and the Se...

Steve Coogan and James Lynch

Long Washington probe yields 84,000 fentanyl pills, hundreds of pounds of drugs

Four Seattle-area men with ties to Central and South America were arrested in a long probe related to drugs, the U.S. Attorney's Office said.

17 hours ago

Image: Water moves through a spillway of the Lower Granite Dam on the Snake River near Almota on Ap...

Associated Press

US acknowledges Northwest dams have devastated the region’s Native tribes

The U.S. government acknowledged for the first time the harms the construction and operation of dams on two rivers have caused tribes.

18 hours ago

mount baker shooting...

Frank Sumrall

Teen arrested in deadly shooting in Mount Baker neighborhood

A 15-year-old boy has been arrested in the Mount Baker shooting that happened on Sunday, according to Seattle police.

18 hours ago

New WA data breach exposes personal info of 1.6 million people who applied for unemployment