OSHA restores injury tracking app after no breach found

The U.S. Occupational Safety and Health Administration will restore its injury tracking application after a technology scan confirmed that there was no breach of the data in the application. 

On Aug. 1, OSHA launched the application as part of the compliance effort for its controversial electronic record-keeping rule, but a note on the website two weeks later said technical difficulties were making some of the ITA pages unavailable. An OSHA spokesperson said the agency received an alert on Aug. 14 from the United States Computer Emergency Readiness Team in the Department of Homeland Security that indicated there was a potential compromise of user information for the application. OSHA identified and notified the one company that appeared to have been affected.   

“OSHA’s primary concern was the potential of a compromise of personally identifiable information — username/password are considered PII,” the agency said in an emailed statement on Friday.  

“A complete scan was conducted by the National Information Technology Center and it has been confirmed that there was no breach of the data in OSHA’s Injury Tracking Application and no information in ITA was compromised.”   

As part of this review, the entire OSHA website was scanned and improvements implemented, according to the agency, which did not specify what improvements were made.  

Access to the application will be restored on Friday morning and OSHA said it will continue its established security monitoring.