So, Sheboygan only has a population of 50K yet the city is sending breach notices to 70K?

https://therecord.media/ransomware-sheboygan-breach-notice
https://en.wikipedia.org/wiki/Sheboygan,_Wisconsin

Nearly 70,000 impacted by ransomware attack on Sheboygan, Wisconsin

The city filed breach notification letters with regulators seven months after a ransomware gang accessed systems.

@metacurity Data builds up over time (which is to say: consider people who have moved out)

(Also, insert rant about having a maximum retention period on data, or moving it to cold storage, here)

@TindrasGrove All good points. Someone over at BlueSky also said Sheboygan is a popular vacation spot too (who knew?) so some part-time residents could have been swept up into the hack too.

@metacurity Its a coastal town, so yeah.

Also also if there’s things like parking tickets in the data, you end up capturing lots of short-term visitors.

@TindrasGrove @metacurity I still don't understand why a city would have that much information saved for that many people.
@cR0w @metacurity because everyone bought in to “data is the new oil” and not “data is nuclear waste”
@TindrasGrove @metacurity But where did they get it all? And in a form that was so easily stored across data sets?

@cR0w @metacurity fair.

But lots of weird data gets collected over time. Especially if, say, utilities are owned by the municipality.

@TindrasGrove @metacurity I guess some utilities do collect more than necessary. The data listed in the article seemed excessive to me but every jurisdiction is different.

@cR0w @metacurity it’s not uncommon to run a credit check on starting utilities.

Not sure how that sweeps up license plate, though, yeah, that one is a bit odd.