Drivers licensed in Louisiana and Oregon targeted in massive cyberattack

A wide-scale ransomware attack that occurred earlier this month threatens state drivers licensing agencies in Louisiana and Oregon, leaving the data of millions of license holders compromised.

On June 15, state officials confirmed that they were affected by a data breach inflicted by a global hack on a popular file sharing tool called MOVEit Transfer. MOVEit is a widely-used third party data transfer tool.

A Russian hacker group called the CL0P Ransomware Gang has claimed credit for the attack, but so far state officials say that they have not been contacted about ransoms.

Both the Oregon Department of Transportation (ODOT) and the Louisiana Office of Motor Vehicles (LOMV) have confirmed that they were affected by the cyberattack.

ODOT says that personal information for approximately 3.5 million holders of Oregon ID or driver’s licenses may be compromised.

“While much of this information is available broadly, some of it is sensitive personal information. We do not have the ability to identify if any specific individual’s data has been breached. Individuals who have an active Oregon ID or driver’s license should assume information related to that ID is part of this breach. We recommend individuals take precautionary measures to protect themselves from misuse of this information, such as accessing and monitoring personal credit reports,” ODOT said in a news release.

Click here for more from ODOT on the hack.

Louisiana officials did not provide information on how many people are affected by the data breach. Louisiana Governor John Bel Edwards says that there is no indication at this time that hackers have used or released LOMV data. However, officials recommend that LOMV customers take the following actions:

See below for more from officials in Louisiana on the cyberattack.

The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) issued an advisory on the CL0P Ransomware Gang exploiting MOVEit vulnerability on June 7.