BreachExchange mailing list archives

Hundreds' personal information found in dumpster


From: "Michael Hill, CITRMS" <mhill () idtexperts com>
Date: Sat, 26 Jan 2008 09:27:34 -0500

http://www.komotv.com/news/local/14449977.html

SEATTLE -- One man went dumpster-diving and discovered a company he trusted trashed his personal information in a 
public dumpster where anyone could have snatched them up. 

Steve Gillett of Seattle said Visa Services Northwest threw out the sensitive documents instead of shredding them. 

The documents, which ended up in a downtown alley, included papers with Gillett's name, social security number, credit 
card information and even a copy of his signature. 

Gillett's private information, as well as those of hundreds of others, had been dumped by the travel services company. 

"This firm was throwing away in a public bin more information than my wife knows about me," Gillett said. 

Xiaoli Ding, the owner of the company, claims what Gillett found was the result of an isolated incident. 

He says he keeps his clients' personal information for year, then destroys the files properly. Then he shreds the 
sensitive documents and recycles the rest. 

"Obviously, we accidentally dumped that particular file in the recycle bin," he said. 

Even so, Ding said, the documents are safe in the bin since the business is located on an upper floor of the building 
where the public doesn't typically visit. 

But the trouble is, the papers don't stay there. 

Everything in that recycle bin on the upper floor eventually ends up in an alley way nearby; it's brought to another 
dumpster in a very public place. 






Michael Hill 
Certified Identity Theft Risk Management Specialist
IDT Consultants
404-216-3751


"If You Think You're Not At Risk, Think Again!"
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml

Current thread: