The Kentucky Department of Fish and Wildlife Resources is aware that customer information was illegally accessed by an unauthorized third party. The department fixed the vulnerability immediately and notified the Commonwealth Office of Technology (COT) of the incident. The appropriate law enforcement agencies have been notified as well.
The data accessed was from the My Profile webpage, and included name, address, birthdate, last 4 digits of SSN, and phone and email address if listed. No credit card numbers, full social security numbers, usernames or passwords were available to the unauthorized third party user and were not accessed. Licensing information was not impacted.
The Kentucky Department of Fish and Wildlife Resources considers the security of customer information a top priority and will continue to work diligently to protect its customers from these types of malicious attacks. If a consumer has a question about their account with the department, they can call the help desk at 800-858-1549.