Michigan government workers had their personal information exposed and possibly stolen when an update to the system went awry.

It is estimated that 1.89 million Michigan residents were affected. What was exposed included names, Social Security numbers and wage information, but not birthdates, addresses or phone numbers. All those exposed were government employees.

The exposure lasted from October 10, 2016 until January 30, 2017. The flaw was quickly resolved once it was discovered. The system was being updated by a third party who was not authorized to view that data.

The state is in the process of contacting those affected and is working with the Michigan State Police Cyber Command Center to investigate the situation. At this point, it is not believed that the data has been compromised.

“Data security is a top priority for the state of Michigan,” said DTMB Director and State CIO David Behen. “We will work with our third party vendors and our state team to review our processes and procedures to avoid incidents like this in the future.”

Source: SCMagazine