Peter Segall / Juneau Empire File
Department of Health and Social Services Commissioner Adam Crum address the House Finance Committee on Tuesday, Feb. 18, 2020. Crum on Thursday discussed a cyberattack that had compromised Alaskans’ information. Crum said because of an ongoing criminal investigation the entity responsible for the attack and the exact information compromised could not be revealed. Free credit monitoring will be offered to eligible Alaskans following the announcement of the cyberattack. DHSS is one of several state departments to have cybersecurity breaches in the past year.

Peter Segall / Juneau Empire File Department of Health and Social Services Commissioner Adam Crum address the House Finance Committee on Tuesday, Feb. 18, 2020. Crum on Thursday discussed a cyberattack that had compromised Alaskans’ information. Crum said because of an ongoing criminal investigation the entity responsible for the attack and the exact information compromised could not be revealed. Free credit monitoring will be offered to eligible Alaskans following the announcement of the cyberattack. DHSS is one of several state departments to have cybersecurity breaches in the past year.

State offers free credit monitoring following data breach

Health department information accessed, state says

Free credit monitoring services will be made available to Alaskans starting Sept. 27, following a cyberattack on the Department of Health and Social Services. Authorities said the attack is believed to have breached databases containing residents’ protected information.

Because of an ongoing criminal investigation, exact details of who’s behind the attack and exactly what information was accessed is not being shared at this time,DHSS Commissioner Adam Crum said Thursday in a news conference. However, DHSS said databases accessed contained information protected under the federal Health Insurance Portability and Accountability Act and the Alaska Personal Information Protection Act. Federal law requires Alaskans be notified that their information may have been compromised.

Crum said at the news conference that beginning Sept. 27 emails with instructions on how to apply for free credit monitoring would be sent to Alaskans who’ve submitted Alaska Permanent Fund dividend applications. In a statement, the department said that same day a toll-free phone number would set up to help Alaskans with their applications between 5 a.m. and 5 p.m.

ADVERTISEMENT
0 seconds of 0 secondsVolume 0%
Press shift question mark to access a list of keyboard shortcuts
00:00
00:00
00:00
 

“It is a fair statement to say that any Alaskan could have been compromised by this,” Crum said.

[113,000 Alaskan voter IDs exposed in data breach]

DHSS said the breach was conducted by a highly sophisticated, state-sponsored entity and has retained the services of cybersecurity companies FireEye and Mandiant. According to DHSS, FireEye said the attacker was “a highly sophisticated group known to conduct complex cyberattacks against organizations that include state governments and health care entities.”

At several points in the news conference, Crum said he could not answer certain questions about the identity of the attacker, and cited the ongoing criminal investigation. An FAQ provided by DHSS refers to the attacker as “nation-state sponsored.”

Crum did say cybersecurity experts believe the attack is no longer ongoing and that the attacker has been removed from DHSS systems. However, DHSS was forced to shut down its databases and revert to manual input of information, Crum said, which has been very time consuming for staff.

Some DHSS databases have been restored, but the shutdown has led to large backlogs of requests for various vital records such as birth certificates and marriage certificates.

The breach was originally announced in May when DHSS took many of its systems offline. DHSS is not the only state department to be the victim of a malware attack. Also in May, then-Chief Justice of the Alaska Supreme Court Joel Bolger announced the court was a victim of a cybersecurity attack.

In December 2020, the Alaska Division of Elections announced it had been attacked and that potentially 113,000 Alaskans’ voter information was exposed.

Contact reporter Peter Segall at psegall@juneauempire.com. Follow him on Twitter at @SegallJnuEmpire.

More in News

Children leap forward to grab candy during a Fourth of July parade on South Willow Street in Kenai, Alaska, on July 4, 2025. (Photo courtesy Sarah Every)
Celebrating the 4th in the streets

Kenai comes out for annual Independence Day parade.

Fire crews respond to the Bruce Fire, July 4, 2025, in Soldotna, Alaska. (Alaska Division of Forestry)
Firefighting crews respond to wildfire outside Soldotna

The 8-acre fire and two “spot fires” of less than one acre each are located near Mile 102 and 103 of the Sterling Highway.

Robert Weaver was last seen at the Doroshin Bay public use cabin on June 25, 2025. (Photo provided by the Kenai National Wildlife Refuge)
Kenai wildlife refuge seeking information on missing man

Robert Weaver was last seen near Skilak Lake on June 25.

The Alaska Dive Search Rescue and Recovery Team conducts a training mission in Seward, Alaska in 2024. Photo courtesy of the Alaska Dive Search Rescue and Recovery Team
Anchor Point fundraiser to benefit Alaska rescue and recovery group

Alaska Dive Search Rescue and Recovery Team is an all-volunteer nonprofit organization established in 2016.

Kachemak Bay Family Planning Clinic staff (left to right) Angie Holland, RN; Jane Rohr, Sonja Martin Young, CNM; Robin Holmes, MD; and Cherie Bole, CMA provide an array of reproductive and sexual health services. (Photo provided by KBFPC)
Kachemak Bay Family Planning Clinic releases report on STI trends on the Kenai Peninsula

The report pulls from data gathered from 2024 to early 2025.

Pool manager and swim coach Will Hubler leads a treading water exercise at Kenai Central High School in Kenai, Alaska, on Tuesday, June 17, 2025. (Jake Dye/Peninsula Clarion)
Swimmers, parents call on Kenai to support Kenai Central pool

The KPBSD Board of Education last week said communities will need to step up and take over administration of pools within the next year.

Traffic passes by South Spruce Street in Kenai, Alaska, on Tuesday, June 10, 2025. (Jake Dye/Peninsula Clarion)
Kenai drops effort to rename South Spruce Street

The resolution would have changed the name to make it clear which road led to North Kenai Beach

Gov. Mike Dunleavy compares Alaska to Mississippi data on poverty, per-pupil education spending, and the 2024 National Assessment of Education Progress fourth grade reading scores during a press conference on Jan. 31, 2025. Alaska is highlighted in yellow, while Mississippi is in red. (Jasz Garrett / Juneau Empire)
Dunleavy calls special session for August

Lawmakers on Wednesday said they were surprised by the move.

Most Read