Cybersecurity incident — 2020-12-25 00:00:00
Affected organization: Office of the Washington State Auditor
Affected country: United States of America
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: FIN11
Actor type: Criminal
Actor country: Russian Federation

Washington's State Auditor office has suffered a data breach that exposed the personal information in 1.6 million employment claims. The Office of the Washington State Auditor ("SAO") states that they suffered a data breach after a threat actor exploited a vulnerability in a secure file transfer service from Accellion.