91ÊÓƵ

The Oregon Construction Contractors Board (CCB) recently uncovered a security breach involving 8,013 of its online contractor accounts.

Unauthorized individuals gained access to contractors’ usernames and related password information, according to a CCB press release. The incident occurred between Oct. 27 and Oct. 29, 2018, and was discovered on April 12, 2019, during a routine audit of the agency’s information technology databases by the Oregon Enterprise Security Office.

A review of the breach revealed that personally identifying information in 466 of the accounts was accessible, the CCB stated.

State information technology experts closed the pathways used by the unauthorized individuals to gain access to the accounts and then enhanced password protection security.

Compromised information included contractors’ names, email addresses, physical addresses and password hashes (codes that protect passwords). Of those compromised accounts, 466 also included an identification number such as a government-issued ID or driver’s license.

The CCB is asking all affected account holders to reset their passwords. The agency also informed those account holders that it is offering identity theft protection and ID theft recovery for one year.