Florida state tax website bug exposed filers’ data

> When asked, the department said that it has identified “no sign of exploitation prior to this breach"

As long as you do not look, you will not find.

And wait until the administration decides to sue the person who reported the breach to them.

> ... access, modify and delete the personal data of business owners whose information is on file with the state’s tax authority by modifying the part of the web address...

> Mohsin said that application numbers are sequential, allowing anyone to enumerate taxpayers’ information by incrementing the application number by a single digit. Mohsin said there were more than 713,000 applications in the system, which the department did not dispute when reached for comment.

Ugh.

Good: At least Florida didn't take the path of Missouri, my home state. [1]

Bad: More "complimentary credit monitoring". Ugh.

[1] https://www.vice.com/en/article/pkpmj7/this-is-the-hacking-i...