BreachExchange mailing list archives
CT SSN's posted on the internet
From: Henry Brown <hbrown () knology net>
Date: Sun, 15 Jun 2008 16:01:52 -0500
http://www.hartfordbusiness.com/news5756.html SSNs Posted On State Web Sites State auditors found DAS violated state law in not protecting personal information By Diane Weaver Dunne Hartford Business Journal Staff Writer 06/16/08 For more than three years, the state Department of Administrative Services posted the Social Security numbers of individual contractors on a state Web site in violation of state law, exposing the state to lawsuits and monetary loss, according to a recently released state audit. The audit also uncovered that the Social Security numbers of prospective nursing employees were accessible on an agency Web site for 19 months until a complaint was lodged. State Auditor Robert G. Jaekle said that when personal information, such as Social Security numbers, falls into the wrong hands, it exposes people to the risk of identity theft. “Social Security numbers — personal identifying information — was not appropriately protected,” said Jaekle, adding that the individuals affected were notified by the agency and access to the information had been removed from the Web. [...] _______________________________________________ Dataloss Mailing List (dataloss () attrition org) http://attrition.org/dataloss Tenable Network Security offers data leakage and compliance monitoring solutions for large and small networks. Scan your network and monitor your traffic to find the data needing protection before it leaks out! http://www.tenablesecurity.com/products/compliance.shtml
Current thread:
- CT SSN's posted on the internet Henry Brown (Jun 15)