INDIANA NOTIFYING 750K AFTER COVID-19 TRACING DATA ACCESSED

Indiana health officials said they are notifying nearly 750,000 state residents that a cybersecurity company “improperly accessed” their personal data from the state’s online COVID-19 contact tracing survey — a description the company disputed as a “falsehood.”

The Indiana Department of Health said the state was notified July 2 that a company gained “unauthorized access” to data, including names, addresses, dates of birth, emails, and data on gender, ethnicity and race.

The nearly 750,000 people whose data was accessed represent all of the state’s participants in its online COVID-19 contact tracing survey, said agency spokeswoman Megan Wade-Taxter. State health department does not collect Social Security information for its COVID-19 contact tracing program, and no medical information was obtained.

“We believe the risk to Hoosiers whose information was accessed is low,” Box said in a news release.

State officials did not identify the company involved in their news release, but Wade-Taxter said the company was UpGuard, a cybersecurity company based in Mountain View, California.