Hackers used stolen login information to gain access to an unspecified number of mySA Gov accounts. The state’s Department of Infrastructure and Transportation stated that it had contacted affected consumers.
“The accounts were accessible because bank customers used the same or a similar passcodes for their mySA Gov account as they did for their account with the unrelated website,” the department has issued.
“The hackers then used the credentials obtained from the unrelated website to gain access to several mySA Gov accounts.” The government found “no indication of any unauthorized transactions” on the impacted accounts. However, it stated that the affected users’ existing passwords had been invalidated. It also “encouraged” affected users to change their driver’s license number “since data might have been obtained by an unauthorized third party.” It’s unclear why or how the attackers knew to use the stolen credentials to target the mySA Gov service.
