An Ohio state government backup tape stolen in June contained far more personal data than was first believed, according to a computer forensics firm hired by the state.
When the incident was discovered, state officials said the device contained data on all 64,467 Ohio state employees and tens of thousands of other people, including Ohio teachers.
Two reports released last week by Columbus, Ohio-based Interhack Corp. said an examination of a copy of the missing tape revealed that it also held the names and Social Security numbers of 47,245 Ohio taxpayers and 19,388 former state employees.
Ron Sylvester, a spokesman for the Ohio Department of Administrative Services, said that Interhack investigators also uncovered banking information on 100 state businesses and the federal employee ID numbers from 40,088 businesses.
The incident is expected to cost the state almost US$3 million, including $2.3 million to provide affected individuals with credit protection services from Debix Inc., Sylvester said.
The tape was stolen from a vehicle that transported data from government offices to an off-site location where developers were working on the state's new $158 million ERP system, known as the Ohio Administrative Knowledge System.
The breach prompted the state to review how backups are handled at all agencies.