San Francisco retirement program SFERS suffers data breach

guest · Jun 3, 2020

San Francisco retirement program SFERS suffers data breach
June 3, 2020
https://www.bleepingcomputer.com/ne...retirement-program-sfers-suffers-data-breach/

The San Francisco Employees’ Retirement System (SFERS) has suffered a data breach after an unauthorized person gained access to a database hosted in a test environment.
SFERS manages the benefits program for active and retired employees of San Francisco, California.

In a data breach notification filed today, SFERS stated that one of their vendors had set up a test environment that included a database containing the information for approximately 74,000 SFERS members.

"On March 21, 2020, 10up Inc. learned that this server had been accessed by an outside party on February 24, 2020. The vendor promptly shut down the server and began an investigation. The vendor found no evidence that the information of SFERS members was removed from its server, but at this time, it cannot confirm that the information was not viewed or copied by an unauthorized party. [...]" the data breach notification states.
Click to expand...

While SFERS states that no Social Security Numbers or bank account information was contained in the breach, there was enough personal information exposed that could be used by threat actors in attacks.
Click to expand...

guest · Jun 20, 2020

San Francisco Employees’ Retirement System Faces Lawsuit After Data Breach
June 19, 2020
https://www.thesfnews.com/san-franc...-system-faces-lawsuit-after-data-breach/57790

Since June 5, The San Francisco Employees’ Retirement System (SFERS) has been confronted with a class-action lawsuit claiming negligence due to a data hack from February.

Righetti Glugoski, a law firm located in San Francisco, is representing the plaintiffs. The case was brought to the firm by San Francisco resident Richard Goss. The defendants of the case are SFERS and 10up, a web consultant that was housing the information that was subject to breach.
The lawsuit claims that SFERS and 10up were not careful enough to protect members’ information.

10up President Jake Goldman told the San Francisco News on Friday, June 19, “We did notice what appear to be a number of pretty basic mistakes in the claim. Given that I am still unaware of any evidence that any data was actually accessed or taken, given that we more than met industry standards for responsible disclosure of risk to the data, and given that anyone potentially impacted was provided identity protection services…my lack of legal expertise notwithstanding, I don’t really understand what damage or harm they are claiming.”
Click to expand...

Still, Goldman noted that if it came down to it, the company has financial coverage built into their insurance policy that would contribute to paying for damages in the event that the court rules against the defendants.
Click to expand...

Log in or Sign up

San Francisco retirement program SFERS suffers data breach

guest Guest

guest Guest

Log in or Sign up

San Francisco retirement program SFERS suffers data breach

guest Guest

guest Guest

Useful Searches