This project will tell the specific methods and story of the evolution of government protection of personal information, and will compare the U.S. and China specifically.
The scope of government data breaches is wide and varied. Incidents of this nature can impact all tiers of government (national, state or regional, or local), along with many distinct public sector agencies covering areas as diverse as tax, health and safety, environmental protection, the military, police, and the justice system, including courts and jails.
Data exposure through an insecure API
Misconfigured cloud storage buckets
Phishing attacks and compromised email accounts
Web security exploits such as SQL injection
Out-of-date software
Employee oversight, such as sending mass emails without ‘bcc’ function
Zero-day exploits launched by determined nation-state hackers
Accidental data loss remains a problem for those tasked with tackling government data breaches. This suggests that more training is needed.
Video: Personal information made public on government website