OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Dataloss] UK: Police personal data found on discarded floppy

From: Michael Hill, CITRMS (mhillidtexperts.com)
Date: Wed Dec 26 2007 - 21:23:17 CST

We get that question a lot in our business and here's how we answer it.

"Mr. (Business Owner) if I call into your business and ask for your home address and phone number, will you or whomever answers the phone going to give it to me?" I think not. The home address and phone number is just the first step to getting your identity stolen.

Michael Hill
Certified Identity Theft Risk Management Specialist
IDT Consultants
404-216-3751

"If You Think You're Not At Risk, Think Again!"

----------------------------------------------------------------------------
    From: lygerattrition.org
    To: datalossattrition.org
    Sent: 12/26/2007 9:56:31 P.M. Eastern Standard Time
    Subj: Re: [Dataloss] UK: Police personal data found on discarded floppy

    On Wed, 26 Dec 2007, Dan O'Donnell wrote:

    ": " <http://news.bbc.co.uk/1/hi/england/devon/7160490.stm>
    ": "
    ": " Police data details found at dump
    ": " A senior police officer has apologised after confidential details of
    ": " staff were found on a dump in Devon.
    ": "
    ": " The details, on a floppy disk, included names, addresses, telephone
    ": " numbers and ranks of employees of Devon and Cornwall Police.
    ": "
    ": " The disk was in an obsolete computer that had been used by the force
    ": " and had been sent for recycling.

    While losing the personal information of police officers is certainly a
    concern due to the nature of their jobs, I've noticed other recent reports
    of general "data loss" involving not much more than names, addresses, and
    sometimes phone numbers. Should this generally be considered "personal
    information" if such data can usually be found in a phone book or
    Google (for most people anyway)? Just a thought and something we consider
    when including (or not including) breach data on attrition's data loss web
    page and database...
    _______________________________________________
    Dataloss Mailing List (datalossattrition.org)
    http://attrition.org/dataloss

    Tenable Network Security offers data leakage and compliance monitoring
    solutions for large and small networks. Scan your network and monitor your
    traffic to find the data needing protection before it leaks out!
    http://www.tenablesecurity.com/products/compliance.shtml

------------------------------------------------------------------------------
  See AOL's top rated recipes and easy ways to stay in shape for winter.

_______________________________________________
Dataloss Mailing List (datalossattrition.org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml