Washington State Food Worker Card Data Breach (2022)

On November 17, 2022, the Washington State Food Worker Card training system appeared in a public data breach listing after a 2018 database backup containing records for 1.6 million people was published to a popular hacking forum the previous year. The Tacoma-Pierce County Health Department later confirmed the incident in June 2023, disclosing that names, dates of birth, email addresses, geographic locations, and approximately 9,500 driver’s license numbers had been exposed.

Confirmed Breach Details

The primary disclosure on Have I Been Pwned states that the compromised material originated from a 2018 backup of the online training platform used to issue food worker cards across Washington state. The leak-site posting from 2022 included 1.6 million unique email addresses, full names, post codes, dates of birth, and roughly 9,500 driver’s license numbers. The notification does not specify exactly how the backup was obtained or whether the attacker gained broader network access. No ransom demand figure or specific malware family is detailed in the public filings.

June 2023 marks the official acknowledgment by the health department, more than four years after the backup was created and roughly one year after the data first surfaced on the hacking forum.

Why This Matters for You and Your Family

If you or anyone in your household completed food-worker training in Washington state, your personal information may now sit in multiple criminal databases. Dates of birth combined with names and driver’s license numbers give identity thieves immediate material for forging documents or opening accounts in your name. Email addresses and post codes allow scammers to craft convincing phishing messages that reference local health regulations or your specific training history, making the attack far more likely to succeed. Children or young adults who worked entry-level food service jobs may have their first official government-linked records exposed before they have established credit histories, creating long-term risks that are difficult to unwind.

Doxxing and Identity-Chain Risks

The combination of email addresses, dates of birth, and geographic data creates straightforward pathways for doxxing. An attacker can link your training record to social-media accounts, gaming usernames, or family addresses with minimal effort. Once one handle is connected to your real identity, every future breach that touches the same email or phone number extends the chain. Credential leaks of this nature frequently cascade into account takeovers on gaming platforms, where children’s profiles become entry points for further harassment or extortion. The exposure of even a small number of driver’s license numbers heightens the chance that your full identity package ends up for sale on specialized fraud forums.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the included cleanup of data broker records tied to the Washington breach.
• Rotate the password used on the Washington State Food Worker Card portal anywhere it has been reused and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure of your information is caught and acted on within hours instead of years.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and training records leaked here.
• Let remediation specialists handle ongoing takedown requests for any new appearances of your driver’s license or date-of-birth combinations on exposed marketplaces.

The Washington State Food Worker Card breach illustrates how even routine government training portals can become high-value targets years after the fact. A single 2018 backup can still endanger your family’s privacy in 2024 and beyond. Start your DoxxScan trial today and place continuous monitoring, identity-chain mapping, and specialist remediation between your household and the expanding criminal marketplaces fed by incidents like this one.