NYC Affordable Housing Lottery Data Breach Exposes Applicant Information

Data Breach of Housing Applications

• 🎯 Hundreds of thousands of applications for New York City's affordable housing lottery program were publicly viewable online.
• 💡 This exposed sensitive personal details including salaries, addresses, and in some cases, social security numbers.
• ⚠️ Applicants discovered their information appearing in search results when searching their own names on search engines like Bing, Yahoo, and DuckDuckGo.

Impact on Applicants

• 💬 Applicants expressed worry about scam calls and the exposure of their personal and family information.
• 🏠 The breach occurred within a system used to internally sort applications, managed by Reside New York, a company approved by the city.
• 💔 Victims felt their privacy was violated, especially in a city where affordable housing is already difficult to secure.

Response and Remediation

• ⚡ Information was no longer publicly viewable hours after CBS News New York reached out to the city and Reside New York.
• 🏢 The city's Housing Preservation and Development Department (HPD) called the incident an unacceptable violation of data privacy standards.
• 🔍 Reside New York is reviewing the incident, taking steps to protect applicant privacy, and has agreed to pay for credit monitoring services for affected applicants.
• ⚠️ Experts warn that the data may have already been retrieved by malicious parties for fraudulent purposes, despite the portal no longer being accessible.
• 📈 HPD is exploring policy changes to prevent future occurrences and has issued a corrective action plan to Reside New York.

Search Engine Visibility

• 🚫 The exposed information did not appear in Google search results.
• 🔍 Microsoft confirmed it removed the problematic results from Bing after being notified.
• ❓ The exact reasons for Google's search results not including the data, and why other search engines did, remain unclear.