New WA data breach exposes personal info of 1.6 million people who applied for unemployment

Feb 1, 2021, 11:04 AM | Updated: Feb 2, 2021, 7:25 am
Washington State Auditor Pat McCarthy answers questions on Monday after reporting a data breach may...
Washington State Auditor Pat McCarthy answers questions on Monday after reporting a data breach may have compromised information from 1.6 million people who've filed for unemployment benefits. (TVW screen shot)
(TVW screen shot)

The Washington State Auditor is reporting a December data breach that could have exposed the personal information of 1.6 million Washingtonians who had applied for unemployment benefits in 2020.

Puget Sound Educational District hit with data breach

The breach was of a third-party server used by the auditor’s office, Accellion, and may also have exposed data from local governments and other state agencies.

People who filed for unemployment between Jan. 1 and Dec. 10, 2020, people whose identities were stolen in last year’s fraud attack, or state government employees may have had their information exposed.

“I know this is one more worry for Washingtonians who have already faced unemployment in a year scarred by both job loss and a pandemic. I am sorry to share this news and add to their burdens,” State Auditor Pat McCarthy said in a written release. “This is completely unacceptable. We are frustrated and committed to doing everything we can to mitigate the harm caused by this crime.”

Washington state’s Employment Security Department was defrauded out of hundreds of millions of dollars last spring, impacting nearly 390,000 people whose stolen identities were used to fraudulently apply for unemployment benefits. In the months to follow, the department took criticism for weak internal controls and an out-of-commission automated process that was supposed to flag suspicious claims. The ESD was not responsible for this latest breach, though, says McCarthy.

Audit finds internal controls at ESD weren’t strong enough to prevent fraud

“I want to be clear: This was an attack on a third-party service provider. The Employment Security Department did nothing to cause this, and is not responsible in any way for this incident,” she emphasized.

McCarthy says they have used Accellion for 13 years and thought the security was trustworthy. Other recent attacks on Accellion resulted in data breaches at the Royal Bank of New Zealand and the Australian Securities and Investment Commission.

Law enforcement is investigating the breach.

McCarthy said the full scope of how this has affected people is still under investigation and their office has contacted every state agency that would be impacted, based on the files given by Accellion. She said those agencies already know who they are.

“We have not heard from anyone affected by it, but that doesn’t mean it hasn’t happened,” McCarthy said of claimants.

The auditor’s office has set up a website for people to learn more about the breach and plans to set up a hotline.

The KIRO Radio Newsdesk contributed to this report

Local News

Kathryn Stone

Oregon kidnapping suspect taken into custody after standoff

Law enforcement officials were able to determine that Foster had been accessing dating applications on his phone.
1 day ago
Friends kitchen...
Micki Gamez

The Friends Experience pop-up opens in Seattle on Feb. 1

The FRIENDS Experience invites fans to step inside the world of the iconic series, relive their favorite moments, and celebrate the show.
1 day ago
dead road rage...
L.B. Gilbert

Greenwood road rage fight involved knife, baseball bat

Police are investigating a road rage incident involving a bat and a knife in a QFC parking lot in Seattle's Greenwood neighborhood.
1 day ago
The logo for OpenAI, the maker of ChatGPT, appears on a mobile phone, in New York, Tuesday, Jan. 31...
Associated Press

Cheaters beware: ChatGPT maker releases AI detection tool

ChatGPT is trying to curb its reputation as a freewheeling cheating machine with a new tool that can help detect if artificial intelligence wrote it
1 day ago
lake stevens...
L.B. Gilbert

Case dismissed against Lake Stevens HS employee accused of sexual misconduct

A Lake Stevens School District employee is under arrest after being suspected of improper sexual contact with at least one child.
1 day ago
bristol bay...
L.B. Gilbert

Bristol Bay salmon runs protected as EPA halts mine development

The EPA won a 12-year battle for a cleaner habitat by taking big steps to protect Bristol Bay salmon runs, the most productive in the world.
1 day ago

Sponsored Articles

safety from crime...

As crime increases, our safety measures must too

It's easy to be accused of fearmongering regarding crime, but Seattle residents might have good reason to be concerned for their safety.
Comcast Ready for Business Fund...
Ilona Lohrey | President and CEO, GSBA

GSBA is closing the disparity gap with Ready for Business Fund

GSBA, Comcast, and other partners are working to address disparities in access to financial resources with the Ready for Business fund.

Medicare open enrollment is here and SHIBA can help!

The SHIBA program – part of the Office of the Insurance Commissioner – is ready to help with your Medicare open enrollment decisions.
Lake Washington Windows...

Choosing Best Windows for Your Home

Lake Washington Windows and Doors is a local window dealer offering the exclusive Leak Armor installation.
Anacortes Christmas Tree...

Come one, come all! Food, Drink, and Coastal Christmas – Anacortes has it all!

Come celebrate Anacortes’ 11th annual Bier on the Pier! Bier on the Pier takes place on October 7th and 8th and features local ciders, food trucks and live music - not to mention the beautiful views of the Guemes Channel and backdrop of downtown Anacortes.
Swedish Cyberknife Treatment...

The revolutionary treatment of Swedish CyberKnife provides better quality of life for majority of patients

There are a wide variety of treatments options available for men with prostate cancer. One of the most technologically advanced treatment options in the Pacific Northwest is Stereotactic Body Radiation Therapy using the CyberKnife platform at Swedish Medical Center.
New WA data breach exposes personal info of 1.6 million people who applied for unemployment