Vermont agency warns 70,000 of possible data compromise

30.01.2007

The 58,000 names represent nearly all of the NEFCU's members at that time. "We've grown bigger since then," Dwyer said.

The Windows-based system that was broken into at AHS appears to have been the target of an automated attack and not a directed one, Tringe said. "It looked like the system had been infected by several bots," which were then used to store various files on the computer -- including a copy of the TV show Bones, she said.

The compromise was detected when the agency's IT staff noticed several of its computers being pinged by the breached server, she said. According to Tringe, the compromised server had been fully patched with all Microsoft Corp. security updates.

"Our initial exams showed no evidence to indicate that any personally identifiable or financial information had been accessed," she said. But since there is no way of confirming that, the state decided to alert individuals of the potential compromise of their data, she said.

Letters are being sent to account holders at the following nine institutions: Central Vermont Public Service Employees Credit Union, First Brandon National Bank, Federal Family Credit Union, Granite Hills CU, Merchants Bank, New England Federal Credit Union, Northfield Savings Bank, Opportunities Credit Union and the Vermont State Employees Credit Union.