Indiana-based SRI Incorporated – which conducts tax sales, deed sales and foreclosure sales relating to the recoupment of delinquent tax for local governments – is notifying roughly 9,000 individuals that their personal information may be at risk.
How many victims? Roughly 9,000.
What type of personal information? Names, addresses, Social Security numbers, tax identification numbers, and bank account and routing numbers.
What happened? New files were added to the software behind SRI's auction website, enabling an unauthorized outside user to access, post and delete files stored on the website.
What was the response? SRI removed all personal information from its system and the personal information is no longer viewable. SRI is migrating all of its online auctions to a new auction system with enhanced security. All impacted individuals are being notified. An investigation is ongoing.
Details: Google notified SRI on March 13 of suspicious activity occurring on the SRI website. SRI believes the unauthorized access may have begun in December 2014. SRI has found no evidence that information was viewed or downloaded.
Quote: “The incident appears to have involved a total of approximately nine thousand individuals in fifty (50) states and countries,” according to a notification letter.
Source: doj.nh.gov, “SRI Incorporated,” April 2, 2015.
