4 ms·

Florida state tax website bug exposed filers’ data

• montroser 4y ago
  > When asked, the department said that it has identified “no sign of exploitation prior to this breach" As long as you do not look, you will not find.
  • freitasm 4y ago
    And wait until the administration decides to sue the person who reported the breach to them.
• jimt1234 4y ago
  Good: At least Florida didn't take the path of Missouri, my home state. [1] Bad: More "complimentary credit monitoring". Ugh. [1] https://www.vice.com/en/article/pkpmj7/this-is-the-hacking-investigation-into-journalist-who-clicked-view-source-on-government-website https://www.vice.com/en/article/pkpmj7/this-is-the-hacking-i...
• guiambros 4y ago
  > ... access, modify and delete the personal data of business owners whose information is on file with the state’s tax authority by modifying the part of the web address... > Mohsin said that application numbers are sequential, allowing anyone to enumerate taxpayers’ information by incrementing the application number by a single digit. Mohsin said there were more than 713,000 applications in the system, which the department did not dispute when reached for comment. Ugh.