Stolen Portable Computer Exposes 519 Citibank Student Loan Corporation Customers
Technorati Tag: Security Breach
Date Reported:
8/8/07
Organization:
Citibank Student Loan Corporation
Contractor/Consultant:
Un-named "service provider"
Number Affected:
519
Types of Data:
Name, address, Social Security number, telephone number and email address.
Breach Description:
A portable computer was stolen from the office of a Citibank service provider that contained sensitive information about Student Loan Provider customers.
Reference URL:
http://doj.nh.gov/consumer/pdf/student_loan2.pdf
Report Credit:
New Hampshire Department of Justice
Response:
The quotes are from Citibank's official notification sent to the State of New Hampshire and the letter sent to affected individuals.
"a portable computer containing certain customer information was stolen from an office of our third party vendor in the burglary of its office building"
"Other equipment was stolen during the burglary and thus we have no reason to believe that customer information was the target of the theft."
[Comfyllama] True, the information may not have been the "target" of the theft, but this certainly does not mean that the information has not, or will not be exposed. The criminal could access the information or a person who may end up buying the hardware from the criminal.
"Your student loan account with The Student Loan Corporation has not been compromised because no financial account information was involved."
[Comfyllama] Great! Your student loan account has not been compromised, but your identity could be. I think I would rather have my student loan account compromised.
"We are committed to safeguarding our customer's information. As evidence of this commitment and prior to this incident, we had already enrolled you in Citi Identity Theft Solutions, a free service from The Student Loan Corporation"
Commentary:
This is a relatively small breach in terms of the number of individuals affected, but if you happen to be a victim this is little consolation. The response from Citibank is crafty.
Had the "service provider" encrypted the information on this portable computer, this would NOT even be a story.
Past Breaches:
None since August 2007
The hoi polloi is evidently not aware of direct consolidation loans. This is because in the recent past there have been a lot of personal loans applications, in spite of the fact that the loans themselves were not to be used in that capacity. A consolidated loan on the other hand can be used in any way; and of course consolidating loan is not a problem exactly. They fall in the category of secured loans. Like payday loans, they can be applied for at a very short notice too.
Date Reported:
8/8/07
Organization:
Citibank Student Loan Corporation
Contractor/Consultant:
Un-named "service provider"
Number Affected:
519
Types of Data:
Name, address, Social Security number, telephone number and email address.
Breach Description:
A portable computer was stolen from the office of a Citibank service provider that contained sensitive information about Student Loan Provider customers.
Reference URL:
http://doj.nh.gov/consumer/pdf/student_loan2.pdf
Report Credit:
New Hampshire Department of Justice
Response:
The quotes are from Citibank's official notification sent to the State of New Hampshire and the letter sent to affected individuals.
"a portable computer containing certain customer information was stolen from an office of our third party vendor in the burglary of its office building"
"Other equipment was stolen during the burglary and thus we have no reason to believe that customer information was the target of the theft."
[Comfyllama] True, the information may not have been the "target" of the theft, but this certainly does not mean that the information has not, or will not be exposed. The criminal could access the information or a person who may end up buying the hardware from the criminal.
"Your student loan account with The Student Loan Corporation has not been compromised because no financial account information was involved."
[Comfyllama] Great! Your student loan account has not been compromised, but your identity could be. I think I would rather have my student loan account compromised.
"We are committed to safeguarding our customer's information. As evidence of this commitment and prior to this incident, we had already enrolled you in Citi Identity Theft Solutions, a free service from The Student Loan Corporation"
Commentary:
This is a relatively small breach in terms of the number of individuals affected, but if you happen to be a victim this is little consolation. The response from Citibank is crafty.
Had the "service provider" encrypted the information on this portable computer, this would NOT even be a story.
Past Breaches:
None since August 2007
The hoi polloi is evidently not aware of direct consolidation loans. This is because in the recent past there have been a lot of personal loans applications, in spite of the fact that the loans themselves were not to be used in that capacity. A consolidated loan on the other hand can be used in any way; and of course consolidating loan is not a problem exactly. They fall in the category of secured loans. Like payday loans, they can be applied for at a very short notice too.
Posted by Evan Francen at 8/9/2007 9:15 PM 
Categories: Stolen Laptop, Citibank Student Loan Corporation
Categories: Stolen Laptop, Citibank Student Loan Corporation
Posts Atom 1.0
Comments