Maryland Department of the Environment, Stolen Laptop, Unknown Number of Victims
Technorati Tag: Security Breach
Date Reported:
8/30/07
Organization:
State of Maryland
Contractor/Consultant:
Maryland Department of the Environment
Number Affected:
Unknown
Types of Data:
Name, address, phone number, and Social Security number.
Breach Description:
A laptop containing four databases was stolen from a Maryland Department of the Environment employee's vehicle. The databases contained personally identifiable information about licenses issues by the State Board of Well Drillers, the State Board of Environmental Sanitarians, the Waterworks Board and Septic Inspectors.
Reference URL:
Press Release: www.mde.state.md.us/PressReleases/1045.html
FAQ: www.mde.state.md.us/laptop_faq.asp
MDE Stolen Laptop Incident Web Page: www.mde.state.md.us/laptop.asp
Report Credit:
Lyger at Attrition.org
Response:
Read the response at the "Press Release" site above.
"The information contained in this computer was password protected, and we believe is unlikely to be accessed for unauthorized purposes."
[Comfyllama] Have we ever heard this before? Why even mention that the computer was password protected? Useless.
"Nevertheless, the loss of this personal information is a significant breach of security and MDE sincerely apologizes for any impacts it may cause to the affected individuals."
"An investigation is underway to determine how this incident occurred, whether State policies were complied with, and to review procedures to ensure that this will not occur in the future."
[Comfyllama] A very reasonable and responsible response. Kudos to MDE.
Commentary:
This is unfortunate. I hope that this incident is against MDE policy and procedure!
I know I sound like a broken record, sensitive data at rest MUST be encrypted!!! Encryption (implemented and managed correctly) = 0 (or very, very, very low) risk to unauthorized disclosure.
Past Breaches:
None since August 2007
Since always, hp laptops have had enjoyed good name. The reason is of course their reliable laptop battery. People are well aware of laptop dilemmas and do not really prefer a refurbished laptop over a trusted name like that of hp.
Date Reported:
8/30/07
Organization:
State of Maryland
Contractor/Consultant:
Maryland Department of the Environment
Number Affected:
Unknown
Types of Data:
Name, address, phone number, and Social Security number.
Breach Description:
A laptop containing four databases was stolen from a Maryland Department of the Environment employee's vehicle. The databases contained personally identifiable information about licenses issues by the State Board of Well Drillers, the State Board of Environmental Sanitarians, the Waterworks Board and Septic Inspectors.
Reference URL:
Press Release: www.mde.state.md.us/PressReleases/1045.html
FAQ: www.mde.state.md.us/laptop_faq.asp
MDE Stolen Laptop Incident Web Page: www.mde.state.md.us/laptop.asp
Report Credit:
Lyger at Attrition.org
Response:
Read the response at the "Press Release" site above.
"The information contained in this computer was password protected, and we believe is unlikely to be accessed for unauthorized purposes."
[Comfyllama] Have we ever heard this before? Why even mention that the computer was password protected? Useless.
"Nevertheless, the loss of this personal information is a significant breach of security and MDE sincerely apologizes for any impacts it may cause to the affected individuals."
"An investigation is underway to determine how this incident occurred, whether State policies were complied with, and to review procedures to ensure that this will not occur in the future."
[Comfyllama] A very reasonable and responsible response. Kudos to MDE.
Commentary:
This is unfortunate. I hope that this incident is against MDE policy and procedure!
I know I sound like a broken record, sensitive data at rest MUST be encrypted!!! Encryption (implemented and managed correctly) = 0 (or very, very, very low) risk to unauthorized disclosure.
Past Breaches:
None since August 2007
Since always, hp laptops have had enjoyed good name. The reason is of course their reliable laptop battery. People are well aware of laptop dilemmas and do not really prefer a refurbished laptop over a trusted name like that of hp.
Comments