Utah governor Gary Herbert has fired director of the state’s technology-services department and state CIO, following a security breach in Utah’s IT infrastructure, which reportedly exposed to hackers personal data of about 780,000 people, The Salt Lake Tribute reported.
In announcing Stephen Fletcher’s resignation, Herbert said the outgoing head of state IT lacked “oversight and leadership.” One of the governor’s family members was a victim of the security breach, he said in a news conference, according to The Tribune.
“The people of Utah rightly believe that the government will protect them, their families and their personal data,” Herbert said. “When they interface with us that is in fact our charge.
“As a state government we have failed to honor that commitment. For that, as your governor and as a Utahn, I am deeply sorry.”
Status of two other technology employees is being reviewed in connection with the incident as well, the governor said.
The hackers reportedly gained access to personal health data the state was in possession of, including the victims’ social security numbers. The security breach occurred on March 30, according to The Tribune.
In addition to ensuring data is encrypted while stored on state servers – instead of just when in transit – Utah has also created a new health security ombudsman for the health department as a response to the incident.
The person appointed to fill the new role, Sheila Walsh-McDonald, will assist the people whose data had been stolen in going through programs that can help protect their information. They include free credit-monitoring services and enrollment in identity-theft insurance coverage.
Fletcher came to Utah State government’s IT department from the US Department of Education, where he served as deputy assistant secretary for management and then as the federal agency’s CIO and CTO.