State of Montana
The State of Montana announced a data security breach impacting 1.3 million people. The state said an attacker gained access to a server at its Department of Public Health and Human Services. The exposed data on the server included demographic information, such as names, addresses, dates of birth and Social Security numbers, according to the state's public information office. The server also contained information about the agency's contractors and current and former employees.
The server was shut down on May 15 immediately after suspicious activity was first detected. A forensics investigation was unable to determine if any information was accessed or stolen, the state's Chief Information Officer Ron Baldwin said. The agency has restored the server and installed additional security protection. The expected costs associated with the breach are expected to be covered by the state's $2 million cyberinsurance policy, officials said.