Anchorage Police Department exposed unredacted traffic-collision reports for 11,402 people in 2021
In 2021, the Anchorage Police Department exposed unredacted traffic-collision reports affecting 11,402 people. The reports included full dates of birth and driver's-license numbers — DPPA-covered data. APD revisited the incident in coverage of a separate 2026 vendor scare.
What happened
In 2021, the Anchorage Police Department published traffic-collision reports online without proper redaction. The reports exposed personal information for 11,402 individuals, including full dates of birth and driver's-license numbers. APD acknowledged the incident and the underlying data classes are protected under the federal Driver's Privacy Protection Act. The 2021 exposure was reviewed again in coverage of a separate, precautionary 2026 server shutdown after a public-safety database vendor (White Box Technologies) was targeted in a cyberattack. APD said no department systems were compromised in the 2026 event, but the older 2021 exposure remains the confirmed personal-data leak in Anchorage's recent record.
What happened
In 2021, the Anchorage Police Department published traffic-collision reports on its public website without proper redaction. The exposed reports affected 11,402 people and included full dates of birth and driver's-license numbers, two of the categories of personal information specifically protected under the federal Driver's Privacy Protection Act.
APD acknowledged the exposure. The department revisited the 2021 incident in coverage of a separate 2026 event, in which APD shut down servers and severed access to a Utah-based public-safety database vendor, White Box Technologies, after that vendor was targeted in a cyberattack. APD stated that the 2026 vendor scare did not result in confirmed compromise of department systems. The 2021 traffic-report exposure remains the confirmed personal-data leak in Anchorage's recent public record.
How it started
Police agencies routinely publish redacted incident reports for transparency and for insurance purposes. The mistake in Anchorage's case was procedural: the redaction step on traffic reports was inconsistent or absent. Once the documents were online, anyone could pull the full date of birth and driver's-license number alongside a name. That data class is exactly what data brokers and identity-theft operations cross-reference against name-and-address records.
The broker side picks up data like this through aggregators that scrape government websites continuously. Even after APD pulled the reports, the data has to be assumed copied.
What this means for you
If you're a sworn officer, dispatcher, or civilian employee in Alaska whose data sits in any police-agency record, the 2021 APD exposure is the case study. Alaska has no Daniel's Law analog. The general public-records exemption at AS §40.25.120(a)(6) covers safety-based redactions but is case-by-case. The federal DPPA gives you a $2,500-per-violation private right of action for downstream misuse of DMV-derived data, but the practical step is keeping your home address off broker pages so the dossier can't be assembled cleanly. We sweep brokers continuously and re-check every two weeks.
Editorial rules: Only public, already-reported incidents. Never name a non-public victim. Always end with the prevention takeaway tied to our service. Cite at minimum one public source per claim.
What would have prevented this
Alaska has no first-responder-specific privacy statute and no Daniel's Law analog. The 2021 APD exposure is a useful reminder that the data classes most likely to leak from a police agency, dates of birth and driver's-license numbers, are exactly what data brokers cross-reference against name-and-address records. Once that data is in circulation, the broker layer is what republishes it. The federal DPPA gives you a private right of action for downstream misuse of DMV-derived data, but the practical mitigation is upstream: continuous broker removal so the cross-references can't be assembled in the first place.
Public sources
- Anchorage Police Department cyber incident — DysruptionHub, 2026-01-15