ST. PAUL, Minn. – The Department of Public Safety (DPS) and MN.IT Services, the State’s IT organization, have discovered and stopped unauthorized viewing of Minnesota drivers license records.
DPS and MN.IT were able to determine that two individuals conducted 55 queries of the drivers license database from August 2 until the unauthorized access was discovered and stopped on August 24.
Through a forensic investigation, MN.IT was able to identify 18 people whose data was viewed without authorization. MN.IT continues its investigation to determine what other records may have been viewed, if any.
The data that may have been viewed included drivers license number, picture, name, address, and date-of-birth. Social Security numbers were not part of the query results.
There is no indication that the data was used for illicit purposes; however, DPS is recommending the affected individuals remain vigilant and review their credit reports on a regular basis. Letters informing the 18 people of the data breach are being mailed today.
The unauthorized lookup was discovered when a member of the public notified DPS and MN.IT about a webpage that allowed queries of the DVS database to view data that are not public. The access was disabled on August 24.
The access to the search function appears to be associated with a July 25 server reconfiguration that inadvertently removed the authentication process for authorized users. There is no evidence of unauthorized access prior to August 2.
In addition to disabling the web page, DPS and MN.IT have increased security and scanning functions for all data access points. Authorized users, such as deputy registrars and law enforcement, continue to have access to drivers license data through other secure systems.
MN.IT Services is the Information Technology (IT) agency for Minnesota’s executive branch, providing the full range of IT services to over 70 agencies, boards and commissions. MN.IT also makes available a subset of services to other Minnesota government entities and education institutions. Our staff of nearly 2,100 dedicated and innovative IT professionals work in over 90 physical locations, including 22 agency-based offices. MN.IT Services sets IT strategy, direction, policies and standards for the State. We manage over 2,000 distinct applications, both citizen-facing and back-office.
About the Minnesota Department Public Safety (DPS)
DPS comprises 11 divisions where 2,100 employees operate programs in the areas of law enforcement, crime victim assistance, traffic safety, alcohol and gambling, emergency communications, fire safety, pipeline safety, driver licensing, vehicle registration and emergency management. DPS activity is anchored by three core principles: education, enforcement and prevention.
About the DPS Driver and Vehicle Services Division (DPS-DVS)
DVS is responsible for driver testing, driver licensing and maintenance of driver records; driver evaluation and compliance; motor vehicle title and registration; commercial vehicle registration; motor vehicle dealer licensing and regulation; and enforcement of no-fault insurance requirements.
- DVS conducted more than 500,000 written and road tests and issued about 3.8 million licenses.
- DVS registered 4.658 million vehicles and issued 1.462 million titles.
- The DVS Public Information Center handled 1.031 million telephone calls and 77,000 emails.
- DVS licenses and regulates 3,558 vehicle dealers in Minnesota.