BUFFALO, N.Y. (WIVB) – Two local businesses, Doritex Corp. of Alden and Kallus Opraments a West Side company, have reached a settlement with New York Attorney General Eric Schneiderman over a security breach that exposed the Social Security numbers of more than 500 job applicants on Doritex’s website.
Doritex, a uniform cleaning and servicing company, was alerted about the breach last June, but the Attorney General charged the company failed to notify the individuals affected or the Attorney General’s office for a month.
Job seekers could apply online at the Doritex website, and investigators found because of the website’s lax security, about 500 job applications were hacked, allowing anyone to do a Google search and find their Social Security numbers.
Kallus Opraments designed the website for Doritex, and the two companies agreed to pay $95,000 in penalties.
Doritex issued a brief statement, Thursday afternoon which said, part: “Doritex takes data privacy very seriously,” adding, “Based on a forensic investigation of this matter, Doritex is confident all employee data is protected, and the company is not aware of any misuse of private information.”
As part of the settlement the two companies have agreed to improve the technology of Doritex’s website, including encryption. Due to Kallus Opraments’ financial condition, their $40,000 share of the civil penalty has been suspended.