The Oregon Department of Human Services (DHS) has started notifying more than 600,000 people that their personal details have been put at risk after staff were tricked into granting hackers access millions of emails.
According to the agency, the security breach occurred on January 8, 2019 when nine employees clicked on a link in an email that purported to be an official government communication.
The targeted phishing email tricked staff members into entering their passwords, handing what should have been well-protected login credentials to criminals.