Stolen City of Columbus computers contain 3,500 Social Security numbers
Technorati Tag: Security Breach
Date Reported:
9/20/07
Organization:
City of Columbus (Ohio)
Contractor/Consultant:
None
Victims:
People who had signed up for the city's Mobile Tool Library, a program that lends power tools, lawn mowers, and other supplies to residents.
Number Affected:
3,500
Types of Data:
Name, address, phone number, and Social Security number.
Breach Description:
Three computers were stolen from a warehouse that contained personal information on people who had signed up for the city's Mobile Tool Library program.
Reference URL:
WTOL-TV Story
Report Credit:
Associated Press
Response:
From the online resource referenced above:
"3,000 people whose Social Security numbers were on three computers stolen from a warehouse.
"The theft affected people who had signed up for the city's Mobile Tool Library, which lends power tools, lawn mowers and supplies"
"Officials say information on the computers was password-protected, making it difficult for thieves to gain access to the names and Social Security numbers"
[Comfyllama] Difficult? Who are these "officials"? Typical password protection is not difficult to circumvent for thieves with even the slightest amount of technical ability. This statement is simply not true.
"Identity-theft protection services could cost the city more than $34,000 if everyone accepts the offer. The service includes fraud alerts to the three national credit bureaus."
The city of Columbus is offering identity-theft protection service to affected individuals for an unspecified period of time.
Commentary:
What a hassle for the people involved. The city has no reason to keep social security numbers on computers unencrypted. This is a demonstration of high-risk behavior on the part of the city and unfortunately there are 3,500 or more people pay the price. Are breaches easier to deal with than encrypting data at rest?
Past Breaches:
Unknown
Date Reported:
9/20/07Organization:
City of Columbus (Ohio)
Contractor/Consultant:
None
Victims:
People who had signed up for the city's Mobile Tool Library, a program that lends power tools, lawn mowers, and other supplies to residents.
Number Affected:
3,500
Types of Data:
Name, address, phone number, and Social Security number.
Breach Description:
Three computers were stolen from a warehouse that contained personal information on people who had signed up for the city's Mobile Tool Library program.
Reference URL:
WTOL-TV Story
Report Credit:
Associated Press
Response:
From the online resource referenced above:
"3,000 people whose Social Security numbers were on three computers stolen from a warehouse.
"The theft affected people who had signed up for the city's Mobile Tool Library, which lends power tools, lawn mowers and supplies"
"Officials say information on the computers was password-protected, making it difficult for thieves to gain access to the names and Social Security numbers"
[Comfyllama] Difficult? Who are these "officials"? Typical password protection is not difficult to circumvent for thieves with even the slightest amount of technical ability. This statement is simply not true.
"Identity-theft protection services could cost the city more than $34,000 if everyone accepts the offer. The service includes fraud alerts to the three national credit bureaus."
The city of Columbus is offering identity-theft protection service to affected individuals for an unspecified period of time.
Commentary:
What a hassle for the people involved. The city has no reason to keep social security numbers on computers unencrypted. This is a demonstration of high-risk behavior on the part of the city and unfortunately there are 3,500 or more people pay the price. Are breaches easier to deal with than encrypting data at rest?
Past Breaches:
Unknown
Posts Atom 1.0
Seems like a lot of government breaches lately!
Reply to this