Public Health Institute

Public Health Institute (PHI) disclosed a data breach affecting the California Environmental Health Tracking Program (CEHTP). On August 4, 2016, PHI discovered an unencrypted database containing user email addresses and passwords was accessible on the internet for approximately 30 days. The breach affected active and expired accounts for the CEHTP Water Boundary Tool, Geocoding Tool, and EHIB content management system. PHI contained the incident by removing the database from the internet, resetting passwords, and implementing bcrypt encryption.