Rhode Island Dept. of Administration can't find HR disk
Technorati Tag: Security Breach
Date Reported:
3/21/08
Organization:
State of Rhode Island
Contractor/Consultant/Branch:
Department of Administration
Victims:
State employees
Number Affected:
~1,400
Types of Data:
Human resources records including Social Security numbers
Breach Description:
"A state computer disk containing the social security numbers of nearly 1,400 people has been reported missing."
Reference URL:
SouthCoast Today
WPRI Eyewitness News
Report Credit:
Associated Press
Response:
From the online sources cited above:
A state computer disk containing the Social Security numbers of nearly 1,400 people is missing, the state Department of Administration announced Friday.
The department said there was no evidence that any number had been misused or that the disk had fallen into the hands of an unauthorized person.
It was working with the Rhode Island State Police to find the disk.
"We do not believe that it was stolen, we just believe it was misplaced at this point in time," said Melanie Marcaccio, the department's deputy personnel director. "We don't believe that individuals outside of the organization had any access to that data at any point in that time."
[Evan] Eventually the lost disk will be found. The question is by whom and what will they do with it? The sad thing is that the information could cause damage if the answers are wrong.
The majority of the 1,400 people affected are state employees whose Social Security numbers were kept in human resources records
The information was discovered missing within the last two weeks when human resources staff members who had relocated from Providence to Cranston could not find the data on the server
The DOA sent a letter Thursday to all those affected, telling them the disk was missing and urging them to put a fraud alert on their credit file so creditors would contact them before any new accounts opened or any existing accounts changed.
Commentary:
Has anyone seen a disk lying around labeled "State of Rhode Island, Department of Administration - CONFIDENTIAL"?
Sensitive personal information requires more control than this. Was the disk encrypted?
Past Breaches:
Unknown
Date Reported:3/21/08
Organization:
State of Rhode Island
Contractor/Consultant/Branch:
Department of Administration
Victims:
State employees
Number Affected:
~1,400
Types of Data:
Human resources records including Social Security numbers
Breach Description:
"A state computer disk containing the social security numbers of nearly 1,400 people has been reported missing."
Reference URL:
SouthCoast Today
WPRI Eyewitness News
Report Credit:
Associated Press
Response:
From the online sources cited above:
A state computer disk containing the Social Security numbers of nearly 1,400 people is missing, the state Department of Administration announced Friday.
The department said there was no evidence that any number had been misused or that the disk had fallen into the hands of an unauthorized person.
It was working with the Rhode Island State Police to find the disk.
"We do not believe that it was stolen, we just believe it was misplaced at this point in time," said Melanie Marcaccio, the department's deputy personnel director. "We don't believe that individuals outside of the organization had any access to that data at any point in that time."
[Evan] Eventually the lost disk will be found. The question is by whom and what will they do with it? The sad thing is that the information could cause damage if the answers are wrong.
The majority of the 1,400 people affected are state employees whose Social Security numbers were kept in human resources records
The information was discovered missing within the last two weeks when human resources staff members who had relocated from Providence to Cranston could not find the data on the server
The DOA sent a letter Thursday to all those affected, telling them the disk was missing and urging them to put a fraud alert on their credit file so creditors would contact them before any new accounts opened or any existing accounts changed.
Commentary:
Has anyone seen a disk lying around labeled "State of Rhode Island, Department of Administration - CONFIDENTIAL"?
Sensitive personal information requires more control than this. Was the disk encrypted?
Past Breaches:
Unknown
Posts Atom 1.0
Comments