2012 — Utah Department of Health: Eastern European hackers exploited misconfigured…
Data compromised
SSNs, names, DOB, addresses
Technical writeup
Mar 2012. Eastern European hackers exploited misconfigured server (Dept of Technology Services). 280k had SSNs exposed; 500k had names, DOB, addresses. Primarily Medicaid/CHIP enrollees and healthcare visitors. 24,000 files downloaded. Largest healthcare hack since HIPAA breach rules (2009). One year credit monitoring offered.
Root cause
Misconfigured server; weak password authentication.