CCB contractor license search temporarily unavailable on website as agency investigates security issue
The Construction Contractors Board (CCB) took steps Thursday to stop an
intrusion into the agency’s website after learning that a database
housing contractors’ personal information was vulnerable.
The state’s Chief Information Office is in the process of determining
whether any personal information was actually compromised.
Concerns initially arose Tuesday evening,
when the agency learned that someone had accessed a CCB-hosted database
that government agencies use to verify that bidders for public works
projects meet state requirements.
While this database houses no personal
information, the CCB closed access after learning that emails and
passwords of some government users were found on the Internet. The CCB
alerted users to the problem, and that database remains closed while CCB
staff adds security.
In continuing to investigate that security issue Thursday, the agency
and the Chief Information Office determined that the CCB’s contractor
licensing database was also vulnerable. This database contains
contractors’ personal information.
The CCB shut down the database and it remains
closed while the agency takes steps to address the vulnerability.
Oregon consumers use the license search to verify that a contractor is
licensed, bonded and insured.
Other features of the CCB website remain open. Contractors can continue
to renew licenses online and take continuing education classes.
If personal information has been compromised,
the agency will offer support to those affected. As more information
becomes available, the CCB will notify licensees and keep the public
informed through the CCB website and news releases.
About the CCB
The CCB is a state agency that licenses construction. Anyone who is
paid to repair, improve, inspect or build a home must be licensed.
Learn more about how to have a successful project at www.oregon.gov/ccb