A programming issue at the Texas Department of Insurance (TDI) exposed the personal information of nearly two million Texans for nearly three years.
The department revealed that information such as Social Security numbers, addresses, dates of birth and phone numbers was made publicly available from March 2019 to January 2022.
The information belongs to 1.8 million Texan workers who have filed compensation claims.
The TDI issued a public notice on March 24, saying that it became aware of a security issue with a TDI web application that manages workers’ compensation information on January 4 2022. The issue allowed anyone with an internet connection access to a protected part of the application.