Employment records in a New Mexico dumpster
Technorati Tag: Security Breach
Date Reported:
6/3/08
Organization:
State of New Mexico
Contractor/Consultant/Branch:
Department of Workplace Solutions
Victims:
Employees and job applicants
Number Affected:
Unknown
Types of Data:
"employment records with names and Social Security numbers"
Breach Description:
"ROSWELL, N.M.—State documents with names and Social Security numbers were thrown into a trash bin behind the state Department of Workforce Solutions office in Roswell."
Reference URL:
The Associated Press via Las Cruces Sun-News
Roswell Daily Record
KRQE Channel 13 News
Report Credit:
Roswell Daily Record
Response:
From the online sources cited above:
Four boxes of manilla folders with documents containing names and social security numbers were mistakenly thrown into a trash bin Monday behind the New Mexico Department of Workforce Solutions office near Main and Bland streets.
[Evan] New Mexico does not currently have a data breach disclosure law on the books. The state is one of eleven that do not. The others are Alaska, South Dakota, Iowa, Missouri, Kentucky, West Virginia, Virginia, Mississippi, Alabama, and South Carolina.
Employees at Savedra's Tienda, a nearby business, contacted County Commissioner Dick Taylor and Magil Duran of the New Mexico Department of Workforce Solutions to help remove the documents from the bin.
[Evan] This is what a model citizen does. How many people are model citizens?
papers were flying out of the Dumpster they were inside.
Duran said the Roswell office of the Department of Workforce Solutions recently moved to a new location and a janitor inadvertently threw the documents in the bin on Monday.
[Evan] Not a good excuse.
"It was a misunderstanding," Duran said.
After arriving at the scene, Duran and Taylor sifted through the bins and retrieved the files.
Duran said he would shred the files immediately.
[Evan] The files should be inventoried and their destruction should be certified.
Taylor said the files looked like employment records with hours worked along with names and social security numbers printed on them.
"That's the bad thing," Taylor said. "They should have been shredded and not dumped in the trash. The state needs to be more careful with records like that."
"We do have a standard procedure," said Carrie Moritomo of the department. "We are currently reevaluating that and making sure all of our field staff offices are aware of what that policy is."
[Evan] A "standard procedure" ain't worth the paper it's written on if nobody knows about it or follows it.
Commentary:
I doubt that this is an isolated incident and I doubt that the agency has a sound information security strategy.
Past Breaches:
Unknown
Date Reported:6/3/08
Organization:
State of New Mexico
Contractor/Consultant/Branch:
Department of Workplace Solutions
Victims:
Employees and job applicants
Number Affected:
Unknown
Types of Data:
"employment records with names and Social Security numbers"
Breach Description:
"ROSWELL, N.M.—State documents with names and Social Security numbers were thrown into a trash bin behind the state Department of Workforce Solutions office in Roswell."
Reference URL:
The Associated Press via Las Cruces Sun-News
Roswell Daily Record
KRQE Channel 13 News
Report Credit:
Roswell Daily Record
Response:
From the online sources cited above:
Four boxes of manilla folders with documents containing names and social security numbers were mistakenly thrown into a trash bin Monday behind the New Mexico Department of Workforce Solutions office near Main and Bland streets.
[Evan] New Mexico does not currently have a data breach disclosure law on the books. The state is one of eleven that do not. The others are Alaska, South Dakota, Iowa, Missouri, Kentucky, West Virginia, Virginia, Mississippi, Alabama, and South Carolina.
Employees at Savedra's Tienda, a nearby business, contacted County Commissioner Dick Taylor and Magil Duran of the New Mexico Department of Workforce Solutions to help remove the documents from the bin.
[Evan] This is what a model citizen does. How many people are model citizens?
papers were flying out of the Dumpster they were inside.
Duran said the Roswell office of the Department of Workforce Solutions recently moved to a new location and a janitor inadvertently threw the documents in the bin on Monday.
[Evan] Not a good excuse.
"It was a misunderstanding," Duran said.
After arriving at the scene, Duran and Taylor sifted through the bins and retrieved the files.
Duran said he would shred the files immediately.
[Evan] The files should be inventoried and their destruction should be certified.
Taylor said the files looked like employment records with hours worked along with names and social security numbers printed on them.
"That's the bad thing," Taylor said. "They should have been shredded and not dumped in the trash. The state needs to be more careful with records like that."
"We do have a standard procedure," said Carrie Moritomo of the department. "We are currently reevaluating that and making sure all of our field staff offices are aware of what that policy is."
[Evan] A "standard procedure" ain't worth the paper it's written on if nobody knows about it or follows it.
Commentary:
I doubt that this is an isolated incident and I doubt that the agency has a sound information security strategy.
Past Breaches:
Unknown
Posts Atom 1.0
I wanted to let you know that Virginia does a data breach law that has been passed and goes into effect July 1. While I don't think it is the best law in the world, it is at least something.
http://leg1.state.va.us/cgi-bin/legp504.exe?081+ful+CHAP0801
Reply to this
Thank you! You are correct.
Reply to this