Date: 03 January 2007
Incident Type: Security Breach
WASC Threat Classification: Unknown

On January 3, a hacker broke into Indiana's government web site and made off with personal information for 71,000 health care aides who obtained certifications from the state, as well as 5,600 credit card numbers from people who had paid the state through the IN.gov web site.

While officials in Indiana tried to write it off as a harmless prank played by a teenager, the U.S. Department of Justice has also been investigating the case, and they believe the same hacker is responsible for attempts on other state government web sites.

References:

• Hacker Suspected Of Multistate Break-In Spree [Information Week]
• Hacker Accesses Credit Card Info On State Web Site [The Indy Channel]
• State Notifies 71,000 Workers Of Web Site Breach [The Indy Channel]
• State: Web Site Breach May Have Been Prank [The Indy Channel]