Skip to main content

Auditor: MNsure data breach was accidental, preventable

  • Author:
  • Updated:
    Original:

An investigation into this fall's data breach at MNsure concludes the release of social security numbers in an email was a mistake with no malicious intent. But the legislative auditor also cites decisions made at the insurance exchange that contributed to the accident.

As MPR reports, the Minnesota Office of the Legislative Auditor found no evidence that a MNsure employee intentionally included the social security numbers of more than 1,500 insurance brokers in the email. The auditor's report says once it happened, MNsure responded to the mistake appropriately.

The audit also concludes, though, that MNsure could have done more to prevent the disclosure of private data in the first place, the Associated Press reports.

The summary of the report by Legislative Auditor James Nobles concludes it was not necessary for MNsure to collect the social security numbers of its brokers. It also finds the agency did not assess the security risks of using email to collect them.

The Star Tribune notes the audit also took exception with a MNsure official calling the mistake "an HR issue" involving an employee who was subsequently fired. The report says that version of events overlooks significant decisions made by others at MNsure that contributed to what happened.

MNsure released numbers this week showing that about 11,000 Minnesotans have used its website to sign up for health insurance coverage since it opened for business on Oct.1.

Next Up

ambulance

Man dies after being 'punched in the head' during altercation in Duluth

A 46-year-old man is in custody and facing 1st-degree manslaughter charges.

Deion Sanders

Deion Sanders says Zimmer, Spielman hadn't spoken 'in months'

Sanders' comments revealed some of the Vikings' issues last season.

police tape, crime scene

Brooklyn Park man pleads guilty in 2020 fatal drive-by shooting

Devon Manley will be sentenced to life in prison with the possibility of parole after 30 years.

Screen Shot 2020-06-16 at 7.48.35 AM

Man gets 10 years for fatal pawn shop fire during Minneapolis riots

The incident, which took place during riots in May 2020,  resulted in one man's death.

Rep. Ilhan Omar

Election officials dismiss conservative group's complaint against Rep. Ilhan Omar

The group alleged that she used campaign funds on her future husband's consulting firm.

Screen Shot 2022-01-15 at 9.53.04 AM

Reports: 6 names surface in Vikings' search for new head coach

Six names have surfaced Saturday in the Minnesota Vikings' hunt for a new head coach.

Pexels - face mask covid holding

Minnetonka approves mask mandate in emergency ordinance

The mandate officially goes into effect Monday night.

snow, measuring snow, snow totals

Here are the snow totals from Friday's winter storm in Minnesota

There was a sharp gradient around the Twin Cities, with the highest amounts in southwestern Minnesota.

Mats Zuccarello

Zuccarello scores twice, Wild win third straight

A team effort helped Minnesota dispatch the Ducks.

Rep. Tou Xiong

State lawmaker Tou Xiong apologizes after driving under the influence

The state representative was pulled over on the night of Jan. 8.

St Lukes Duluth GSV Pro

Duluth hospital requiring visitors to show vax proof, neg. test

The health care system is also tightening visitor guidelines.

ridgeview urgent care facebook

Ridgeview halting urgent care at a Twin Cities site 'until further notice'

The organization cited "growing emergency medical needs" at the facility.

Related