From: Henry Brown (hbrownknology.net)
Date: Sun Jun 15 2008 - 16:01:52 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

http://www.hartfordbusiness.com/news5756.html

SSNs Posted On State Web Sites
State auditors found DAS violated state law in not protecting personal
information
By Diane Weaver Dunne
Hartford Business Journal Staff Writer
06/16/08

For more than three years, the state Department of Administrative
Services posted the Social Security numbers of individual contractors on
a state Web site in violation of state law, exposing the state to
lawsuits and monetary loss, according to a recently released state audit.

The audit also uncovered that the Social Security numbers of prospective
nursing employees were accessible on an agency Web site for 19 months
until a complaint was lodged.

State Auditor Robert G. Jaekle said that when personal information, such
as Social Security numbers, falls into the wrong hands, it exposes
people to the risk of identity theft.

“Social Security numbers — personal identifying information — was not
appropriately protected,” said Jaekle, adding that the individuals
affected were notified by the agency and access to the information had
been removed from the Web.

[...]

_______________________________________________
Dataloss Mailing List (datalossattrition.org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]