Greene County Data Breach (2012)

GREENE COUNTY, Ohio Greene County residents who have used an email address, user name and password on any Greene County website may want to change that information in other applications because the countys web server was hacked into Monday night. Greene County Auditor David Graham said the breach at about 9:30 p.m. Monday did not involve any information that was private. The public information on the server includes documents regarding real estate, recorders document searches, sanitary engineering, utility billing and dog tags. Graham said those people who use common user names and passwords may want to change those in other accounts. The county also will be contacting the estimated 250 users whose information may have been accessed. We know that people like to use one password for multiple purposes, Graham said. So thats where our concern is that if you had a user name and password on our system that was the same user name and password that you use for your bank account, we want to make sure you know. The Greene County Sheriffs Office is investigating with help from Greene County Information Technology Director Steve Tomcisin. Through this we discovered that there was a vulnerability and were taking steps to address it, he said. The countys in the process of taking steps to make sure that we have the list of users and were going to be proactive and notify them that this is what has taken place and you need to take the necessary precautionary measures. Graham said more sensitive information like credit card numbers are kept on internal servers and never were at risk. Were looking at the design in the program they were able to get in through and addressing those issues, Graham said. We may be buying additional software so we can more closely monitor when people would try to hack in.