Indiana notifying 750K after COVID-19 tracing data accessed

Aug 17, 2021, 12:58 AM | Updated: 3:35 pm

INDIANAPOLIS (AP) — Indiana health officials said Tuesday they are notifying nearly 750,000 state residents that a cybersecurity company “improperly accessed” their personal data from the state’s online COVID-19 contact tracing survey — a description the company disputed as a “falsehood.”

The Indiana Department of Health said the state was notified July 2 that a company gained “unauthorized access” to data, including names, addresses, dates of birth, emails, and data on gender, ethnicity and race.

The nearly 750,000 people whose data was accessed represent all of the state’s participants in its online COVID-19 contact tracing survey, said agency spokeswoman Megan Wade-Taxter.

State Health Commissioner Kris Box said the state health department does not collect Social Security information for its COVID-19 contact tracing program, and no medical information was obtained.

“We believe the risk to Hoosiers whose information was accessed is low,” Box said in a news release.

State officials did not identify the company involved in their news release, but Wade-Taxter said the company was UpGuard, a cybersecurity company based in Mountain View, California.

UpGuard spokeswoman Kelly Rethmeyer said in statement Tuesday that Indiana’s news release describing the data access incident includes “many falsehoods.”

“For one, our company did not `improperly access’ the data. The data was left publicly accessible on the internet. This is known as a data leak,” she said. “It was not unauthorized because the data was configured to allow access to anonymous users and we accessed it as an anonymous user.”

Rethmeyer added that UpGuard “discovered this leaked information in the course of our research and notified the Indiana Department of Health since they were unaware of the leak.”

She added that the company “aided in securing the information, in turn ensuring that it would no longer be available to anyone with malicious intent.”

A message seeking comment on UpGuard’s statement was left Tuesday afternoon with Indiana’s health department.

Indiana officials said in their news release that UpGuard signed a “certificate of destruction” last week with the state to confirm that it had destroyed the data and not released it to any other entity.

Rethmeyer said that UpGuard has deleted “all the data in our possession.”

The Indiana Office of Technology and the state health department added that they have corrected a “software configuration issue” involved in the data access incident. Both departments also requested the accessed records, and those were returned Aug. 4, according to the news release.

“We have corrected the software configuration and will aggressively follow up to ensure no records were transferred,” said Tracy Barnes, Indiana’s chief information officer.

Rethmeyer questioned the state’s description of the software issue, saying that “the `Configuration issue’ is that every record was made to be publicly accessible.”

Indiana’s health department said it will send letters to affected Hoosiers notifying them that the state will provide one year of free credit monitoring and is partnering with Experian to open a call center to answer questions from those affected.

The Indiana Office of Technology said it will also continue regular scans to ensure that the information was not transferred to another party.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.


Associated Press

Smallest German governing party stalls on citizenship reform

BERLIN (AP) — Senior members of the smallest party in Germany’s coalition government are seeking to hit the brakes on plans to ease the rules for obtaining German citizenship, arguing Monday that the government must first do more to ensure that people who are in the country illegally are deported. Chancellor Olaf Scholz and Interior […]
1 day ago
Wreaths hang on the Truman Balcony of the White House in Washington, Sunday, Nov. 27, 2022. (AP Pho...
Associated Press

‘We the People’ is the White House’s theme for the holidays

WASHINGTON (AP) — Drawing decorating inspiration from America’s founding documents, Jill Biden chose a “We the People” theme to deck the White House halls and to remind Americans of what unites them throughout the year, especially during the holidays. Journalists were given a sneak peek early Monday before the first lady was to unveil the […]
1 day ago
Associated Press

Israel’s Likud signs coalition deal with anti-LGBTQ radical

JERUSALEM (AP) — Former Israeli prime minister Benjamin Netanyahu has struck a coalition deal with a small ultranationalist faction leader known for homophobic rhetoric and disparaging remarks about non-Orthodox Jews, a sign of the prospective government’s hardline makeup. Netanyahu’s Likud party announced Sunday that the agreement names Noam faction leader Avi Maoz as a deputy […]
1 day ago
FILE - President Joe Biden speaks during the Partnership for Global Infrastructure and Investment m...
Associated Press

Biden boosts US effort to stem sexual violence in war zones

WASHINGTON (AP) — President Joe Biden is strengthening U.S. policy aimed at stemming sexual violence in war conflict zones, elevating the problem — increasingly documented in Ukraine and elsewhere — to the level of a possible serious human rights abuse that triggers sanctions and other actions against foreign perpetrators. Biden, a Democrat, on Monday will […]
1 day ago
FILE - Senate Majority Leader Chuck Schumer, D-N.Y., center, welcomes Senator-elect Peter Welch, D-...
Associated Press

Democrats kept the Senate this year, but 2024 may be harder

NEW YORK (AP) — Democrats celebrating a successful effort to keep control of the U.S. Senate this year will soon confront a 2024 campaign that could prove more challenging. The party enters the next cycle defending 23 seats, including two held by independents who caucus with Democrats. That’s compared with just 10 seats that Republicans […]
1 day ago
Associated Press

Water levels in Zimbabwe’s biggest dam too low for power

HARARE, Zimbabwe (AP) — Electricity shortages that have been plaguing Zimbabwe are set to worsen after an authority that manages the country’s biggest dam said water levels are now too low to continue power generation activities. The Zambezi River Authority, which runs the Kariba Dam jointly owned by Zimbabwe and neighboring Zambia, said in a […]
1 day ago

Sponsored Articles


Medicare open enrollment is here and SHIBA can help!

The SHIBA program – part of the Office of the Insurance Commissioner – is ready to help with your Medicare open enrollment decisions.
Lake Washington Windows...

Choosing Best Windows for Your Home

Lake Washington Windows and Doors is a local window dealer offering the exclusive Leak Armor installation.
Anacortes Christmas Tree...

Come one, come all! Food, Drink, and Coastal Christmas – Anacortes has it all!

Come celebrate Anacortes’ 11th annual Bier on the Pier! Bier on the Pier takes place on October 7th and 8th and features local ciders, food trucks and live music - not to mention the beautiful views of the Guemes Channel and backdrop of downtown Anacortes.
Swedish Cyberknife Treatment...

The revolutionary treatment of Swedish CyberKnife provides better quality of life for majority of patients

There are a wide variety of treatments options available for men with prostate cancer. One of the most technologically advanced treatment options in the Pacific Northwest is Stereotactic Body Radiation Therapy using the CyberKnife platform at Swedish Medical Center.
Work at Zum Services...

Seattle Public Schools announces three-year contract with Zum

Seattle Public Schools just announced a three-year contract with a brand-new company to the Pacific Northwest to assist with their student transportation: Zum.
Swedish Cyberknife 900x506...

June is Men’s Health Month: Here’s Why It’s Important To Speak About Your Health

According to the Centers for Disease Control and Prevention, men in the United States, on average, die five years earlier than women.
Indiana notifying 750K after COVID-19 tracing data accessed