Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: security curmudgeon (jerichoattrition.org)
Date: Wed Sep 01 2010 - 01:48:04 CDT
---------- Forwarded message ----------
From: InfoSec News <alertsinfosecnews.org>
By J.L. MILLER
The News Journal
August 31, 2010
DOVER -- In a data breach that one security expert said could be worth
millions of dollars to scam artists, Aon Consulting, the state's benefits
consultant, inadvertently posted personal information of about 22,000
state retirees on the Web, potentially exposing them to identity theft for
the rest of their lives.
The information appeared on the state's procurement website from Aug. 16
to Aug. 20, and included the retirees' Social Security numbers, dates of
birth and gender. Their names were not included.
The company said it accidentally included the personal information in a
request for proposals it had prepared to solicit bids from insurance
companies interested in providing vision coverage to state employees and
Insurers need age and other information on the pool of people to be
covered in order to prepare a bid, Aon Consulting spokesman Joe Micucci
said Monday. He said that is normally done by using a random series of
digits assigned to individuals to shield their identity, not their Social
However, "the information that should have been randomized was not,"
Dataloss Mailing List (datalossdatalossdb.org)
Archived at http://seclists.org/dataloss/
Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.