Auditor: MNsure data breach was accidental, preventable

Author:
Updated:
Original:

An investigation into this fall's data breach at MNsure concludes the release of social security numbers in an email was a mistake with no malicious intent. But the legislative auditor also cites decisions made at the insurance exchange that contributed to the accident.

As MPR reports, the Minnesota Office of the Legislative Auditor found no evidence that a MNsure employee intentionally included the social security numbers of more than 1,500 insurance brokers in the email. The auditor's report says once it happened, MNsure responded to the mistake appropriately.

The audit also concludes, though, that MNsure could have done more to prevent the disclosure of private data in the first place, the Associated Press reports.

The summary of the report by Legislative Auditor James Nobles concludes it was not necessary for MNsure to collect the social security numbers of its brokers. It also finds the agency did not assess the security risks of using email to collect them.

The Star Tribune notes the audit also took exception with a MNsure official calling the mistake "an HR issue" involving an employee who was subsequently fired. The report says that version of events overlooks significant decisions made by others at MNsure that contributed to what happened.

MNsure released numbers this week showing that about 11,000 Minnesotans have used its website to sign up for health insurance coverage since it opened for business on Oct.1.

Next Up

butcher and the boar

Butcher & the Boar makes comeback with new ownership

Local hospitality company Jester Concepts has bought the brand. The new location is still being determined.

Hy-Vee

Staff at Mankato Hy-Vee incorrectly diluted COVID vaccines for 62 patients

The retailer says that there is no reason for medical concern.

rowdi lab missing

Twin Cities man going to great lengths to find beloved dog, missing in northern MN

He's hoping drone operators can help him locate Rowdi, his yellow lab.

Hennepin County Government Center

Some Hennepin County Government Center services will be unavailable during Chauvin's trial

Access to the building will be limited during the trail, which begins March 8.

Street sweeper

Driver, 19, killed in collision with street sweeper

It happened Thursday evening near Thief River Falls.

famous dave's

Famous Dave's to launch its first 'line service' restaurant in the Twin Cities

The new model of restaurant will open in September in Coon Rapids.

State Capitol.

Minnesota's budget outlook improves, now projecting $1.6B surplus

The state was projecting a $1.3 billion deficit in November.

warroad ice road

2.5 mile skating path through Warroad was a hit, now there's an effort to keep it

The "Riverbender Crew" is hoping to buy new equipment to maintain the path this season, and for years to come.

Screen Shot 2021-02-26 at 10.10.55 AM

Officers identified in fatal shooting of suspect in Isanti County

Three officers were identified in the police chase that ended with one suspect being shot and a police dog being injured.

House for sale

Zillow to start making offers on Twin Cities homes based off its 'Zestimates'

The Twin Cities property market is seriously hot right now.

Related