160,000 SSNs and 1 million driver's license numbers might have been accessed

May 10, 2013 08:42 GMT  ·  By

Sometime between September 2012 and February 2013, hackers managed to breach into the systems of the Washington State Administrative Office of the Courts. 

According to the Associated Press, officials confirmed that 94 social security numbers (SSNs) had been stolen by the hackers. Despite the fact that there’s no evidence that the attackers accessed more information, they could have gained access to 160,000 SSNs, and as many as 1 million driver’s license numbers.

An investigation revealed that the cybercriminals exploited an Adobe ColdFusion vulnerability, which was patched by Adobe some time ago.

The potentially affected individuals are those booked into a county or city jail in Washington between September 2011 and December 2012. These may have had their SSNs stolen.

A second category of potential victims, whose driver’s license numbers might have been obtained, are individuals who received DUI citations between 1989 and 2011, ones who had a superior court criminal case between 2011 and 2012, and ones who had a traffic case in Washington in the same period.

Additional security measures have been implemented to avoid future incidents. Officials said that the Office of Courts was probably just a random target of opportunistic hackers who went phishing for data.