[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv3q3ww81rnfr":3,"$f2txcmgmaljroi":63},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":19,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":21,"affectedCountUnit":22,"hasEnglishDescription":4,"contentLocale":23,"availableLocales":24,"translations":34,"severity":45,"dataClasses":46,"description":53,"seoTitle":54,"seoDescription":55,"logoUrl":56,"isVerified":4,"isSensitive":4,"isSpamList":57,"isMalware":57,"company":58},"6a66ec636a3610aaa0822143","WashingtonDepartmentSocialHealthServices2026","Washington Department of Social and Health Services 2026年数据泄露事件","washington-department-social-health-services-2026","dshs.wa.gov","2026-03-01T00:00:00.000Z","2026-07-27T05:28:03.748Z","2026-10-09T21:07:46.326Z","Official Washington DSHS notice confirming unauthorized employee access to client data","https:\u002F\u002Fwww.dshs.wa.gov\u002Fsites\u002Fdefault\u002Ffiles\u002FNoticeLetterWebFINAL.pdf",[15,17,18],"https:\u002F\u002Focrportal.hhs.gov\u002Focr\u002Fbreach\u002Fbreach_report.jsf","https:\u002F\u002Fwww.hipaajournal.com\u002Fwashington-dept-health-social-services-insider-breach-2026\u002F",8600,"known",null,"unknown","zh",[25,26,23,27,28,29,30,31,32,33],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":35,"tr":36,"zh":37,"hi":38,"es":39,"ar":40,"fr":41,"bn":42,"pt":43,"ru":44},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"Low",[47,48,49,50,51,52],"Personal information","Names","Dates of birth","Social Security numbers","DSHS client numbers","General categories of services received","\u003Cp>\u003Cstrong>Washington Department of Social and Health Services 2026年数据泄露事件\u003C\u002Fstrong>是一起于2026年3月发现的内部人员访问事件。一名DSHS员工出于与工作无关的原因，访问了内部客户数据系统中的个人信息。该机构确认，此人可能查看过姓名、出生日期、社会保障号码和DSHS客户编号。\u003C\u002Fp>\n\u003Cp>美国卫生与公众服务部民权办公室维护的公开记录列出的受影响人数约为8,600人，并将该事件归类为涉及笔记本电脑的未经授权访问\u002F披露。未经核实的人数、数据字段以及有关威胁行为者的说法，不纳入本事件的公开披露范围。\u003C\u002Fp>\n\u003Ch2>Washington DSHS数据泄露事件是如何得到确认的？\u003C\u002Fh2>\n\u003Cp>主要来源是DSHS官方网站发布的《数据泄露通知》，共三页。该机构的通知函说明了发现事件的月份、原员工的访问行为、可能被查看的数据字段、未发现被访问的健康信息、系统访问权限的终止、与执法部门的合作，以及建议受影响人员采取的措施。\u003C\u002Fp>\n\u003Cp>第二个来源是HHS OCR数据泄露门户，该门户确认了8,600人的影响范围及联邦层面的事件分类。第三个来源是HIPAA Journal于2026年6月30日发布的报道。该报道依据官方通知，独立描述了内部人员的访问行为、数据类别、员工离职情况及DSHS的应对措施。\u003C\u002Fp>\n\u003Ch2>2026年3月发现了什么？\u003C\u002Fh2>\n\u003Cp>DSHS在3月发现，一名员工出于与其职责无关的原因，访问了内部客户数据系统中的个人信息。该机构立即终止了这名员工对DSHS系统的访问权限，审查了此人以往的操作及客户数据访问记录，并在仍在进行的调查中配合州和地方执法部门。\u003C\u002Fp>\n\u003Cp>公开通知没有说明未经授权的查看行为始于哪一天、终于哪一天，也没有说明持续了多长时间。因此，不能将通知中的时间理解为访问或发现事件的确切日期。\u003C\u002Fp>\n\u003Ch2>哪些信息可能被查看过？\u003C\u002Fh2>\n\u003Cp>根据DSHS的审查，原员工可能查看过客户的姓名、出生日期、社会保障号码、DSHS客户编号，以及所接受服务的大类。这些字段属于敏感个人信息，可能被用于身份盗用、账户接管尝试或有针对性的社会工程攻击。\u003C\u002Fp>\n\u003Cp>该机构明确表示，未发现证据表明这名员工访问过诊断、检查结果、治疗、健康保险理赔或病历记录等具体健康信息。因此，本条目仅报告服务大类，不添加任何未披露的诊断信息或详细医疗记录。目前尚未确认文件曾被下载、传输至外部或公开发布。\u003C\u002Fp>\n\u003Ch2>8,600人的影响范围意味着什么？\u003C\u002Fh2>\n\u003Cp>官方来源公布的受影响人数或记录数，代表所报告的事件影响范围。这并不意味着每一种已披露的数据类别都涉及每一个人。DSHS表示，出于谨慎考虑，该机构联系了所有信息可能被这名员工查看过的客户，即使某些访问可能与工作有关。\u003C\u002Fp>\n\u003Cp>这一总数是通知对象的人数，而不是已确认信息遭到滥用的人数。相关来源没有说明每个人都涉及所有字段，也没有证实这8,600人的信息全部都被实际查看过。因此，本条目不按数据字段细分人数，也不将文件数、行数或访问事件数计入受影响人数。\u003C\u002Fp>\n\u003Ch2>DSHS采取了哪些措施？\u003C\u002Fh2>\n\u003Cp>该机构在发现相关活动后，立即终止了这名员工对DSHS系统的访问权限，并审查了此人以往的操作。DSHS还表示，正在实施额外的防护措施，审查数据隐私与安全政策及流程，并协助州和地方执法部门开展仍在进行的调查。\u003C\u002Fp>\n\u003Cp>HIPAA Journal确认，此人已不再为DSHS工作，但相关来源没有说明此人是否因该事件被解雇，还是以其他方式离职。该事件未与外部攻击者、恶意软件、勒索软件团伙或泄露网站建立关联。\u003C\u002Fp>\n\u003Ch2>受影响的DSHS客户应采取哪些措施？\u003C\u002Fh2>\n\u003Cp>收到通知的人应定期检查DSHS账户活动、银行及支付卡对账单和信用报告，留意不熟悉的活动或记录。如发现可疑活动，应通过官方渠道联系DSHS；视情况也可向美国联邦贸易委员会、华盛顿州总检察长及地方执法部门报告。\u003C\u002Fp>\n\u003Cp>社会保障号码与出生日期同时涉及此事件，需要长期留意。对于突如其来、声称代表DSHS的电话、短信或链接，不应通过这些渠道提供客户编号、密码或身份信息；应通过通知中经核实的电话号码主动联系。如出现可疑消息或账户活动，应通过该机构当前的官方联系渠道核实，不要使用消息中的链接。\u003C\u002Fp>","Washington Department of Social and Health Services 2026年数据泄露事件 (8.6 千 已报告记录数)","Washington Department of Social and Health Services 2026年数据泄露事件. 据报告，涉及8.6 千条记录。 已报告的数据：个人信息, 姓名, 出生日期。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fwashington_dshs.png",false,{"name":59,"sector":60,"country":61,"website":10,"websiteArchiveUrl":62,"websiteStatus":62,"websiteCheckedAt":21},"Washington State Department of Social and Health Services","Government","United States","",{"success":4,"breaches":64},[65,71,79,85],{"slug":66,"title":67,"companyName":68,"logoUrl":69,"breachDate":70,"affectedCount":21,"affectedCountStatus":22},"liechtenstein-beneficial-owners-register-2026","2026年列支敦士登受益所有人登记册数据泄露事件","Liechtenstein Office of Justice","\u002Fuploads\u002Flogo\u002Fliechtenstein-beneficial-owners-register-2026.webp","2026-07-29T00:00:00.000Z",{"slug":72,"title":73,"companyName":74,"logoUrl":75,"breachDate":76,"affectedCount":77,"affectedCountStatus":78},"texas-department-of-criminal-justice-2026","得克萨斯州TDCJ数据泄露（1,494+人受影响）","Texas Department of Criminal Justice","\u002Fuploads\u002Flogo\u002Ftexas-department-of-criminal-justice.png","2026-07-23T00:00:00.000Z",1494,"lower_bound",{"slug":80,"title":81,"companyName":82,"logoUrl":83,"breachDate":84,"affectedCount":21,"affectedCountStatus":22},"pnld-2026","PNLD 2026年数据泄露：警方联系信息","Police National Legal Database","\u002Fuploads\u002Flogo\u002Fpnld-official.png","2026-07-01T00:00:00.000Z",{"slug":86,"title":87,"companyName":88,"logoUrl":89,"breachDate":84,"affectedCount":21,"affectedCountStatus":90},"uk-department-for-education-2026","2026年英国教育部数据泄露事件","UK Department for Education","\u002Fuploads\u002Flogo\u002Fuk-department-for-education-2026.webp","not_disclosed"]