Breachesby GlyphArc of Erie County
Disclosed Mar 9, 20183,751 affectedSettled
Nonprofit exposed clients' sensitive data online for years; USD 200,000 NY AG penalty
The Buffalo nonprofit serving people with developmental disabilities left clients' sensitive personal information exposed on the internet for years. It paid a USD 200,000 penalty and agreed to a risk assessment.
What is known
| People affected | 3,751 (as reported to HHS) |
|---|---|
| Disclosed | Mar 9, 2018 |
| Attack | Exposed data |
| Data exposed | NamesSocial Security numbersHealthOther |
| Sector | Nonprofit · US |
| Status | Settled |
| Lawsuit or fine | USD 200,000 NY AG penalty (Aug 2018) (about $200K) |