Nearly 10 Million Driver’s License Holders Exposed in the Oregon DMV and Louisiana OMV Cyber Attack

ALICIA HOPE  / Reporter

Source : https://www.cpomagazine.com/cyber-security/nearly-10-million-drivers-license-holders-exposed-in-the-oregon-dmv-and-louisiana-omv-cyber-attack/

An Oregon DMV and Louisiana OMV cyber attack has leaked sensitive data of nearly 10 million driver’s license holders.

– Advertisement –

The breach attributed to the Russian-linked Clop ransomware gang exploited a zero-day vulnerability CVE-2023-34362 in the MOVEit Transfer secure file transfer service used by the two DMVs.

The data breach has impacted possibly hundreds of organizations globally, including several US federal agencies.

Louisiana OMV cyber attack impacted all the state’s ID holders

According to Louisiana OMV (Office of Motor Vehicles), the cyber attack impacted all holders of the state’s driver’s license, ID, or car registration numbers.

Data exposed includes the victims’ names, addresses, Social Security Numbers, dates of birth, height, eye color, driver’s license numbers, vehicle registration information, and handicap placard information.

The Louisiana OMV cyber attack impacted at least 6 million driver’s license holders. The state of Louisiana intends to notify all potential victims.

Meanwhile, Louisiana OMV found no evidence suggesting that the threat actor sold, used, shared, or released the exposed data. The Clop ransomware gang also promised to delete all personal information stolen from government agencies.

Louisiana’s Governor’s Office of Homeland Security and Emergency Preparedness (GOHSEP) has launched a dedicated website to help the state’s driver’s license holders mitigate the impacts of the cyber attack.

GOHSEP advised the potential victims to take additional steps to protect themselves from online identity theft by resetting all online accounts’ passwords, including banking, email, and social media, and monitoring their credit files.

Credit reporting agencies also allow you to freeze your credit file at no cost to prevent fraudsters from obtaining credit cards or taking loans using your personal information.

Additionally, potentially impacted driver’s license holders should obtain an “Identity Protection Pin” from the Internal Revenue Service (IRS) to prevent cyber criminals from fraudulently filing tax returns or receiving tax refunds on the victims’ behalf.

“If you suspect any abnormal activity involving your data, including financial information, contact the Federal Trade Commission at 1-877-FTC-HELP or visit www.ReportFraud.FTC.gov immediately,” Louisiana OMV advised.