You’ve likely heard about the Oregon Employment Department (OED) data breach affecting over 850,000 people. Earlier this month, the OED publicly admitted a data breach with personally identifiable information (PII).
The breach was disclosed to the public over four days after it was initially discovered, publicly announcing it 12 minutes before the closing the office for the weekend on Friday, October 10. This was already a dodgy move by the OED, but apparently, that trend was to continue in this manner.
KATU 2 reports two weeks later, that only now did the affected customers start getting notified. When initially asked why the agency waited so long to notify the victims whose social security numbers, as well as other PII, was stolen in the incident, the agency declined to respond. Only later did a spokeswoman reply that the wait was long to confirm which customers exactly were affected. Many people were outraged by the lengthy wait to find out.
The Oregon Employment Department now offers free credit score monitoring by a third-party company for the affected customers. Many affected people are concerned about using the service. Some even say that after taking their information, the credit monitoring service website stopped working and when called the company were simply told to wait.
