On April 30 the city of Arvada announced that notification letters had been sent out to about 900 individuals and businesses to let them know that some of their personal information was inadvertently exposed on the city’s website as part of a public database.
According to a press release from the city, there is no evidence that the information was viewed or accessed, nor was the information released by an outside party.
City staff found the personal information in a document that had been contained in a database management system available on the site on July 8. Once the information was found, public access to the page was immediately restricted and an internal investigation was begun.
Arvada retained data security, forensics and legal experts to help examine nearly 1.2 million pages to make sure all sensitive information had been removed.
The city is making a variety of data-security resources available for free to affected people and businesses. The city has also strengthened existing data security and is training staff to be more prepared to safeguard information.