Alabama employment website hacked; users’ personal information at risk
Published 4:27 pm Wednesday, March 22, 2017
Alabama’s online jobs database was hacked this week, and officials are now warning thousands of users their personal information may have been exposed.
The site, www.joblink.alabama.gov, is developed and maintained by America’s Job Link Alliance – Technical Support (AJLA-TS). AJLA-TS confirmed on Tuesday that a malicious third party “hacker” exploited a vulnerability in the AJL application code to view the names, social security numbers, and dates of birth of jobseekers in the AJL systems of 10 states: Alabama, Arizona, Arkansas, Delaware, Idaho, Illinois, Kansas, Maine, Oklahoma and Vermont.
The threat has been contained and the hacker’s access to all AJL systems has been disabled, according to the state Department of Labor.
Anyone who signed up for an account on JobLink or utilized its services over the past four years may be at risk. This includes anyone who has received unemployment insurance benefits. Accounts established after March 14 are not affected.
Those with valid social security numbers and those with a valid email address on file will receive an email with instructions on how to proceed. Information is also available at www.joblink.alabama.gov and www.labor.alabama.gov.
“Our customers’ personal information is something we value,” said Alabama Secretary of Labor Fitzgerald Washington. “We are working around the clock with all vendors, state, and federal agencies involved to ensure that we have the most up-to-date information regarding this incident and to make sure that all precautions are being taken to prevent such an incident in the future.”
Dr. Joanne Hale, Alabama’s acting secretary of information technology, said the state had requested an immediate and independent investigation by the Multi-State Information Sharing and Analysis Center (MS-ISAC), a collaborative initiative of the Office of Cybersecurity and Communications within the U.S. Department of Homeland Security (DHS).
Anyone who has been affected by this breach, or thinks they may have been affected, should carefully watch their bank accounts, credit cards and other financial transactions. For more information on how you can protect your credit, refer to the following major credit reporting agencies:
• Equifax: 1-800-685-1111, www.equifax.com;
• Experian: 1-888-397-3742, www.experian.com; and
• TransUnion: 1-800-916-8800, www.transunion.com.
You may request that they place a fraud alert and or a credit freeze on your file. You may also contact the IRS Identity Protection Specialized Unit at 1-800-908-4490. See www.identitytheft.gov/databreach for additional follow-up steps.
AJLA-TS is in the processing of establishing a call center to answer questions from those who are affected. This center should be operational within two to three business days. Customers may email www.AJLAincidentresponse@AJLA.net with any additional questions about the incident.
Further information will be provided as it becomes available.