Pallets of sensitive information left outside at recycle center
Technorati Tag: Security Breach
Date Reported:
10/26/08
Organization:
Unknown "companies"
Contractor/Consultant/Branch:
Western Recycling, this is ONLY the location where the information was found and in no way appears to be at fault
Location:
Boise, Idaho
Victims:
Customers
Number Affected:
"at least 100"
Types of Data:
"Social Security numbers, bank account numbers, address histories and credit histories"
Breach Description:
"Forty boxes filled with files containing Social Security numbers, bank account numbers, address histories and credit histories of at least 100 people sat unprotected outside a Boise recycling center Saturday."
Reference URL:
Idaho Statesman
KTVB Channel 7 News
Report Credit:
Cynthia Sewell, Idaho Stateman
Response:
From the online sources cited above:
Forty boxes filled with files containing Social Security numbers, bank account numbers, address histories and credit histories of at least 100 people sat unprotected outside a Boise recycling center Saturday.
[Evan] What person would think it is OK to send forty boxes of private files to the recycling center and leave them outside? #1, papers containing sensitive information MUST be shredded (then recycled) and #2, outside, really?
Someone dropped off two pallets stacked with the boxes that contained mortgage and other files.
The recycling center was not open at the time.
At least two people who noticed the boxes while dropping off their own recyclables became concerned and notified the Statesman or the police.
"Here's a whole plethora of information," which could be used for identity theft, said Boise police officer Jason Kindelberger, who investigated the boxes.
"Usually people have to work hard to steal this kind of stuff, going through mail boxes or trash or the Internet. This is just sitting out here," he said.
[Evan] I disagree with "usually people have to work hard to steal this kind of stuff". People make it way too easy for people to steal this kind of stuff.
Many of the boxes contained about a dozen loan files each.
"I could be in there for all I know," Kindelberger said.
Kindelberger contacted a Western Recycling employee, who came to the center and moved the boxes inside.
"We are still going to try and find the owner, find out who dropped off those boxes and try to prevent it from happening again," Kindelberger said.
[Evan] I don't like to use this word often because I like to save it for when I need it, but whoever dropped off these files is an idiot. Did the police try Idiots, Inc.? Maybe Idiots Anonymous, Boise chapter.
The Idaho Statesman was unable to reach the companies whose names appeared on the files.
Carolann Zografos was dropping off cardboard for recycling when she noticed the stacks of boxes piled in front of the recycling bins.
"They looked like folders full of private information," she said.
When she looked through a folder and realized what it contained she became concerned.
"I thought, 'Holy crackers, look at all this stuff that's not supposed to be out here.' I would not want my loan information, my home address, my credit report, my bank account numbers just sitting out there," she said.
[Evan] "Holy crackers" sounds funny to me.
Commentary:
I sent an email to the author of the article cited above seeking any information regarding the companies listed on the files. No word back yet.
We don't know what has become of the information since the Western Recycling employee brought the information inside the facility. We don't know if anyone intends to notify the persons affected either. The Idaho Attorney General is Lawrence Wasden and I wonder if he has any jurisdiction here? The Consumer Protection Division web site is here.
Past Breaches:
Unknown

10/26/08
Organization:
Unknown "companies"
Contractor/Consultant/Branch:
Western Recycling, this is ONLY the location where the information was found and in no way appears to be at fault
Location:
Boise, Idaho
Victims:
Customers
Number Affected:
"at least 100"
Types of Data:
"Social Security numbers, bank account numbers, address histories and credit histories"
Breach Description:
"Forty boxes filled with files containing Social Security numbers, bank account numbers, address histories and credit histories of at least 100 people sat unprotected outside a Boise recycling center Saturday."
Reference URL:
Idaho Statesman
KTVB Channel 7 News
Report Credit:
Cynthia Sewell, Idaho Stateman
Response:
From the online sources cited above:
Forty boxes filled with files containing Social Security numbers, bank account numbers, address histories and credit histories of at least 100 people sat unprotected outside a Boise recycling center Saturday.
[Evan] What person would think it is OK to send forty boxes of private files to the recycling center and leave them outside? #1, papers containing sensitive information MUST be shredded (then recycled) and #2, outside, really?
Someone dropped off two pallets stacked with the boxes that contained mortgage and other files.
The recycling center was not open at the time.
At least two people who noticed the boxes while dropping off their own recyclables became concerned and notified the Statesman or the police.
"Here's a whole plethora of information," which could be used for identity theft, said Boise police officer Jason Kindelberger, who investigated the boxes.
"Usually people have to work hard to steal this kind of stuff, going through mail boxes or trash or the Internet. This is just sitting out here," he said.
[Evan] I disagree with "usually people have to work hard to steal this kind of stuff". People make it way too easy for people to steal this kind of stuff.
Many of the boxes contained about a dozen loan files each.
"I could be in there for all I know," Kindelberger said.
Kindelberger contacted a Western Recycling employee, who came to the center and moved the boxes inside.
"We are still going to try and find the owner, find out who dropped off those boxes and try to prevent it from happening again," Kindelberger said.
[Evan] I don't like to use this word often because I like to save it for when I need it, but whoever dropped off these files is an idiot. Did the police try Idiots, Inc.? Maybe Idiots Anonymous, Boise chapter.
The Idaho Statesman was unable to reach the companies whose names appeared on the files.
Carolann Zografos was dropping off cardboard for recycling when she noticed the stacks of boxes piled in front of the recycling bins.
"They looked like folders full of private information," she said.
When she looked through a folder and realized what it contained she became concerned.
"I thought, 'Holy crackers, look at all this stuff that's not supposed to be out here.' I would not want my loan information, my home address, my credit report, my bank account numbers just sitting out there," she said.
[Evan] "Holy crackers" sounds funny to me.
Commentary:
I sent an email to the author of the article cited above seeking any information regarding the companies listed on the files. No word back yet.
We don't know what has become of the information since the Western Recycling employee brought the information inside the facility. We don't know if anyone intends to notify the persons affected either. The Idaho Attorney General is Lawrence Wasden and I wonder if he has any jurisdiction here? The Consumer Protection Division web site is here.
Past Breaches:
Unknown
Comments