OPEA

The Oklahoma Public Employees Association learned today that the Attorney
General’s office has advised the Office of Personnel Management to keep state employees’ identification numbers confidential.

“OPEA commends the Attorney General’s action to protect state employees’ private information,” said OPEA Executive Director Sterling Zearley. “The Oklahoman is requesting data that could allow someone to hack into the state computer system and leave state employees as well as the state of Oklahoma’s computer system vulnerable.”

In a letter to OPM Administrator Oscar Jackson, Assistant Attorney General Tom Gruber indicated releasing employee identification numbers could expose the CORE/People Soft computer system operated by the Office of State Finance to hackers.

“According to OSF, hackers frequently attempt to penetrate the state’s system, from both inside and outside the United States,” the letter said. “OSF constantly battles to maintain the integrity of the state’s systems and data.

“Obtaining the employees’ names and identification numbers could allow someone to penetrate the PeopleSoft system by writing a simple program to try combinations of numbers to go with the first four characters of the employees’ last names,” the letter continues. “The same program could beused to run through the entire list of employee identification numbers and effectively disable everyone’s account in PeopleSoft in a matter of minutes. Further, if the program were smart enough to remember where it left off, eventually it would get a match,enabling it to access employees’ accounts and all the information they contain.”

“These are exactly the concerns OPEA has been pointing out as the association has fought to protect state employees’ privacy and the integrity of information contained in the state data system,” said Zearley. “Obviously, the Attorney General’s office, as well as the Office of State Finance, are concerned this information could be used nefariously.

“OPEA will continue to work with legislators on SB 1753, which protects state employee private information,” concluded Zearley. “State employees who have devoted their lives to providing services to the people of Oklahoma have the right to expect their private information is protected by their employer. We appreciate the Attorney General’s Office taking the first step.”

To view a copy of the letter click here.