computerjpg-5139c251d9da084d.jpg

Up to 1.87 million workers in Michigan may have seen their names, social security numbers and wages accessed by an unauthorized user due to a glitch in the state's computer system for processing unemployment. Michigan State Police are working to determine how many people were affected.

(MLive file photo)

LANSING, MI -- A state computer system contained a glitch and may have exposed personal information, the Michigan Department of Technology Management and Budget revealed on Friday.

Here's everything we know so far:

What happened?

In October 2016, a software update to the Michigan Data Automated System (MiDAS) system used by the state's Unemployment Insurance Agency allowed employers and human resources professionals to access personal information they were not authorized to view. The state identified the problem on Jan. 30 and fixed it on Jan. 31, 2017.

Who could have accessed the information?

Human resources professionals working at payroll vendor companies. These companies handle compliance with the state's unemployment requirements for Michigan employers.

It's worth noting those who could potentially have accessed the information are professionals who are routinely handling sensitive information, said Unemployment Insurance Agency spokesman Dave Murray.

What information could unauthorized users have accessed?

An unauthorized user could have accessed a person's name, social security number and wage information.

Birth dates and home addresses could not have been accessed by an unauthorized user.

How many people were exposed?

That is not known at this point, said Murray and DTMB spokesman Caleb Buhs. The Michigan State Police Cyber Command Center is conducting an investigation to determine how many were exposed to a release of information. As many as 1.87 million Michiganders could be affected.

Could your information have been exposed?

As Buhs put it, "If you are an employee in Michigan and your company uses a payroll vendor to process payroll, then you can potentially be included."

There are 31 payroll vendors in the state:

7-Eleven

Aatrix

Accountants World

Acrisure

ADP

Benepay

Casper Willson Wilson

Computing Resources

Connectpay LLC

CoStaff National Services Inc

Craft Accounting

CSS Payroll Inc

DTMB

DM Payroll

Dominion Systems

GT Independence

Heins Acctg

Hewitt Assoc

Highpoint Business Services LLC

Infiniti HR LLC

Julie Lepper Acctg

Mercantile Bank

My Pay Solutions

Nieland & Kosanke PC

One Source Virtual

Paychex

Paycomm Payroll LLC

Paycor

Paylocity Corp

Payroll 1

Payroll Tax Mgt

Professional Systems

Ultimate Software

VenSure HR Inc

Wayne County Regional

Zen Payroll

You would not have been part of the potentially exposed group if:

You worked for a company that did not use a payroll vendor

You were not an active employee at any time between Oct. 10 and Jan. 31

What should you do?

DTMB recommends the following:

Monitor financial account statements and immediately report any suspicious or unusual activity to financial institutions.

Request a free credit report at

Take steps to monitor their personally identifiable information and report any suspected instances of identity theft to their local law enforcement.

Who can you contact?

The state has set up a special hotline to handle inquiries about this issue. Reach it by calling 855-707-8387 between 8 a.m. and 4 p.m. on weekdays.

How is the state moving forward?

The state has already fixed the problem, but State Police are working to identify and notify those who may have been affected. The state is reviewing how it handles patches from third-party vendors.

"We are learning from this. We're taking steps moving forward to make sure that we review and test and check, double-check, triple-check these updates in the future," Buhs said.