A Connecticut Department of Children and Families (DCF) spokesperson confirmed that the email accounts of two DCF staffers were compromised by an external sophisticated phishing email in May.
DCF handles thousands of cases with classified information surrounding child abuse and neglect cases. The Department of Administrative Services (DAS), which oversees the state’s IT security services, identified the source of the attack and removed the malicious email from all DCF users’ inboxes.
DCF said all of the affected emails are being reviewed to determine how many contained personal information and/or confidential records. The state is in the process of notifying anyone who may have been affected and will offer credit monitoring and identity theft protection to anyone whose Social Security number was compromised.
Original reporting: NBC Connecticut (Hartford) — read the source article.
