A state database containing sensitive information, including more than 600 Social Security numbers, was available to the general public through the Virginia Department of General Services website since 2001.
The department announced Friday that the site is now secure, and it is notifying affected individuals.
The state does not believe the sensitive information was used maliciously or in a criminal manner. The database was not accessible via search engines, according to an agency statement.
The database is used by more than 40 state agencies to upload information about contracts and procurements, spokeswoman Susan Pollard told The Washington Examiner Friday. A Department of Social Services employee recently discovered the contents of the database could be found by conducting a series of queries on the Department of General Services website.
“You would have to seriously search for this information,” Pollard said.
Pollard could not say when the database was taken offline but it was sometime in the last two weeks. Until that point, anybody could have accessed the information.
In addition to 639 Social Security numbers, the database also included sensitive state information and federal tax identification numbers.
“This is troubling and we will make sure the individuals affected are notified promptly,” said Richard Sliwoski, director of the Department of General Services. “While we have taken immediate action to remove the database information, it’s imperative we look at long-term strategies to make sure this never happens again. That is our next step.”
A central telephone number will be set up next week for individuals to call with concerns. Those directly affected will be contacted by the state in the coming weeks.
