bleepingcomputer[.]com/news/security/millions-of-oregon-louisiana-state-ids-stolen-in-moveit-breach/
There are no signs yet that the stolen data has been misused, & the Clop gang behind the breaches said: "I want to tell you right away that the military, children's hospitals, GOV etc like this we no to attack, and their data was erased,". Those who have had their data stolen however are still strongly advised to consider their data at risk, monitoring credit reports etc.
Louisiana and Oregon warn that millions of driver's licenses were exposed in a data breach after a ransomware gang hacked their MOVEit Transfer security file transfer systems to steal stored data.These attacks were conducted by the Clop ransomware operation, which began worldwide hacks of MOVEit Transfer servers on May 27th using a previously unknown, zero-day vulnerability tracked as CVE-2023-34362.
These attacks have led to widespread disclosures of data breaches worldwide, impacting companies, federal government agencies, and local state agencies.
The Louisiana Office of Motor Vehicles (OMV) announced yesterday that they believe all Louisianans with a state-issued driver's license, ID, or car registration likely had their data exposed to the threat actors."Louisiana's Office of Motor Vehicles (OMV) is one of a still undetermined number of government entities, major businesses and organizations to be affected by the unprecedented MOVEit data breach," explains an alert from the Louisiana OMV.
The OMV says that those impacted likely had the following personal information exposed:
Name
Address
Social Security Number
Birth date
Height
Eye Color
Driver's License Number
Vehicle Registration Information
Handicap Placard Information
The Oregon DMV released a similar statement and a press release explaining that its MOVEit Transfer data breach impacted approximately 3,500,000 Oregonians with an ID or driver's license.
Other organizations who have already disclosed MOVEit Transfer breaches include US federal agencies, Zellis (BBC, Boots, and Aer Lingus, Ireland's HSE through Zellis), the University of Rochester, the government of Nova Scotia, the US state of Missouri, the US state of Illinois, BORN Ontario, Ofcam, Extreme Networks, and the American Board of Internal Medicine.