The City of Houston inadvertently exposed a data breach affecting 7,525 current and former Houston Fire Department (HFD) employees after sharing a link intended for promotion exam information. The link, distributed by the city’s Human Resources Director, granted unauthorized access to non-password-protected folders containing Social Security numbers (SSNs). While the city initially blamed HFD members for accessing and downloading the data, the Houston Professional Fire Fighters Association (HPFFA) denied responsibility, asserting the breach stemmed from the city’s failure to secure the link. The exposure was accidental, with no evidence of malicious intent, but it resulted in the compromise of sensitive employee PII (Personally Identifiable Information). The incident highlights systemic lapses in data protection protocols within municipal operations, raising concerns over accountability and internal safeguards for handling confidential records.

Information about City of Houston employees’ health insurance was compromised after an employee’s laptop computer was stolen. The password-protected computer may have contained records, including names, addresses, dates of birth, Social Security numbers and other medical information. Professionals are trained not to remove laptops from City offices unless sensitive data is encrypted but apparently one employee “failed to follow his training.”