Mark Harmsworth of the Washington Policy Center discusses a recent identity theft that took place at Washington’s Labor and Industry Tukwila facility of hard drives, laptops, cellphones, office equipment, access cards and other items
Mark Harmsworth
Washington Policy Center
Washington’s Labor and Industry (L&I), reported on April 29 that a theft had occurred at its Tukwila facility of hard drives, laptops, cellphones, office equipment, access cards and other items.
The hard drives held agency files which may have contained the personally identifiable information of people who have had business with the regional office [Tukwila] location including some L&I employees’ dependents’ personal information, according to L&I.
This, again, raises the issue of whether the state has the ability to protect Washington residents’ data appropriately. The breach is the latest in a series of high profile data leaks from state agencies, including the state auditor’s office who is tasked with auditing breaches.
L&I has indicated that the data stolen would not be accessible without considerable effort. This is not the standard that is required to protect data. The industry standard for data protection is an AES-256 encryption algorithm or better.
With today’s technology-based systems, the reality is that no system is 100% safe, but in this case several reasonable steps appear not to have been taken by those handling the data. Similar to the data breach that occurred at WSU in 2017, the data that should have been stored on secure servers was stolen while it was outside of its intended normal use. In the WSU case, a researcher had data stored on a local drive for analysis and did not follow the appropriate data protection procedures.
The government has a lot of very sensitive data concerning Washington residents stored on servers, hard drives and laptops.
Private companies are required to follow laws to protect both the security and the privacy of consumer data and recent proposals such as the Washington Privacy Act should also be applied to state agencies.
It’s time the agencies take the protection of personal data seriously.
For those concerned that their data may have been part of the breach, L&I has set up a call center for more information and steps you can take to protect your accounts and credit. It can be reached on (833) 940-2302.
Mark Harmsworth is the director of the Small Business Center at the Washington Policy Center.
Also read:
- CCSO discovers human remains in homeless campOn Monday, CCSO patrol deputies, acting on an online report from a resident, located partially decomposed human remains in a tent structure at a transient camp in the wooded area north of NE 179th St near NE 10th Ave.
- Union High School baseball celebrates those who serve at Honor GameThe Union High School baseball team invited veterans, first responders, and educators to their game against Battle Ground on Tuesday to participate in their Honor Game, celebrating those who serve others.
- If voters decide to repeal WA Cares, will the state refund tax collections?If voters approve Initiative 2124 this November to repeal the program known as WA Cares, workers can opt out of having 58 cents out of every $100 earned deducted from their paychecks.
- County Permit Center moves to new office in Public Service CenterThe Clark County Permit Center has a new home within the Public Service Center.
- City of Vancouver wants to hear from the public about city manager recruitment surveyThe city recently launched a nationwide recruitment process to hire Vancouver’s next city manager.
- Vancouver Fire responds to house fireOn Tuesday (April 23) at 3:45 p.m., the Vancouver Fire Department was called for a house fire at 100 S. Knoxville Way.
- Ridgefield School District school bond proposal appears to be failingThe first results of the April 23 special election show the school bond proposal in the Ridgefield School District is currently failing approval.