« May 2006 | Archives Home | July 2006 »
Blog / June 2006
Laptop theft exposes 243,000 Hotels.com customers
Jun 2, 2006 by Tom Fragala
CNET has this story… A seemingly random theft has led to another potential breach of personal data--this time name, address and credit card data from Hotels.com customers. A laptop belonging to an Ernst & Young employee was stolen in a...
More on the VA data breach
Jun 2, 2006 by Tom Fragala
Computerworld has an article under the heading of “continued coverage: data security breaches. Tim O'Pry, his wife and his son are all veterans, and they're among the 26.5 million vets whose personal data was stolen this month from the home...
Unisys partner makes case for banks profiting from ID thefts?
Jun 2, 2006 by Tom Fragala
Computerworld has a rather strange article. It says, Banks can enhance their reputation for security by acting as custodians for personal identity credentials designed to make identity theft difficult. This idea was advanced by Graham Alston, a partner in Unisys...
Cleaning Up Data Breach Costs 15x More Than Encryption
Jun 6, 2006 by Tom Fragala
TechWeb has this report… Protecting customer records is a magnitude less expensive than paying for cleanup after a data breach or massive records loss, a research company said Tuesday.Gartner analyst Avivah Litan said in a research note that data protection...
Student loan data breach: 1.3 million Texas students' names, SSNs
Jun 7, 2006 by Tom Fragala
TNCNet via the Dallas Morning News reports on another data breach. (Dallas Morning News, The (KRT) Via Thomson Dialog NewsEdge). Don't breathe easy just because your student loans are long paid off: Names and Social Security numbers from accounts closed...
Royal Ahold Loses Personal Data of Former Employees
Jun 7, 2006 by Tom Fragala
The data security breaches continue at a breathtaking pace. This time Washington Post has a story about the huge grocer Royal Ahold (Stop & Shop, etc.): Grocery retailer Royal Ahold NV has lost personal information for an unknown number of...
VA Data Breach Effects Active Duty Personnel
Jun 7, 2006 by Tom Fragala
The WaPo has a new story on the VA data breach reported on this blog here and here. This breach included sensitive personal data on active duty personnel. That’s especially devastating I feel because if those folks are overseas and...
Nuclear security worker data breach
Jun 9, 2006 by Tom Fragala
Good lord. CNET News.com has this story. Add the U.S. Department of Energy to the list of federal agencies beset by theft of their employees' personal data in recent months.Officials appearing before Congress on Friday went public for the first...
YMCA laptop with 65,000 members' information stolen
Jun 9, 2006 by Tom Fragala
The Providence Journal tells us how yet another laptop is involved in a data breach. The statement by the YMCA referenced in the article almost seems to downplay the significance of checking account and routing numbers by saying that only...
U of Michigan Credit Union Data Breach Leads Identity Theft
Jun 11, 2006 by Tom Fragala
Brian Koerner from About.com has this important follow up story. In the case of the University of Michigan Credit Union, where the breach occurred last summer, such compromise of personal information has been confirmed to have led to cases of...
iJacking?? Intersections Creates a New Word
Jun 11, 2006 by Tom Fragala
Intersections, Inc., the NASDAQ-listed company behind the IdentityGuard products, has a new marketing campaign. It’s called “stop ijacking” and you can see for yourself at www.stopijacking.com. Apparently the goal of the campaign is to create a new term they “own”...
Another Security Breach at Ohio University?
Jun 11, 2006 by Tom Fragala
Brian Koerner has another interesting story brewing at About.com. Reportedly Ohio University has suffered yet another security breach, making it its fourth breach reported in less than two months. As of June 9, 2006 Ohio University posted on their website that...
CNN: victim had identity stolen over 200 times
Jun 16, 2006 by Tom Fragala
Lou Dobbs did a story on Audra Schmierer, who had her Social Security benefits from 14 years of work wiped out, owes $1 million in back taxes, and was detained by customs. All because her social security number was sold...
PayPal Security Flaw Allows Identity Theft
Jun 17, 2006 by Tom Fragala
Netcraft reports on this insidious scam (my emphasis added). A security flaw in the PayPal web site is being actively exploited by fraudsters to steal credit card numbers and other personal information belonging to PayPal users. The issue was reported...
Verizon Laptop Theft May Expose Employees
Jun 17, 2006 by Tom Fragala
WSJ.com has this news brief. Verizon Communications Inc. has notified employees that the theft of two company laptop computers may leave them vulnerable to identity fraud.In a letter dated March 1, Verizon alerted workers that computers stolen from a company...
6 months "free" credit monitoring for veterans (not really)
Jun 18, 2006 by Tom Fragala
IdentityGuard is offering U.S. veterans six months of free fraud protection (in light of the recent VA data breach we reported here and here). They say they are providing this offer “because we value and appreciate your service to our country.” But, wait,...
Truston in Wired News
Jun 19, 2006 by Tom Fragala
Truston was mentioned in a Wired News article last week. Ryan Singel authored the well-written article....
Laptop With Equifax Employee Data Stolen
Jun 20, 2006 by Tom Fragala
AP has this report. A credit bureau suffers a data breach of its own employees data. Equifax Inc., one of the nation's three major credit bureaus, said Tuesday a company laptop containing employee names and Social Security numbers was stolen from...
VA announces free credit monitoring
Jun 21, 2006 by Tom Fragala
The Veterans Administration announced today that the agency will provide one year of free credit monitoring to individuals whose Social Security Number may have been stolen in the data breach incident. However, they have not selected a vendor yet and...
Heightmax investigation by local ABC news station
Jun 21, 2006 by Tom Fragala
More on one of my favorite scams going, Heightmax. Here’s an excerpt from an ABC News WFTS TV report. (Hat tip to Rob). The following is a conversation between ABC Action News reporter Linda Hurtado and the president of Sunny...
House panel plans hearings on VA records theft
Jun 22, 2006 by Tom Fragala
Army Times reports Rep. John Salazar, D-Colo., a member of Buyer’s committee, introduced a bill Tuesday that would require the VA to provide free credit monitoring and credit reporting for any veterans whose personal information was on the stolen computer....
Credit monitoring for veterans not enough?
Jun 22, 2006 by Tom Fragala
Grant Gross of ComputerWorld has this story. The U.S. Department of Veterans Affairs' (VA's) offer of free credit monitoring to the 26.5 million military veterans affected by a recent data theft is not enough to fix the problem, the chairman...
Did one word doom the VA to weak security?
Jun 22, 2006 by Tom Fragala
Martin McKeay's Computerworld Blog says so. According to GovExec.com, the reason the Veterans Administration didn't have a centralized IT security authority was because the VA's general council argued that the CIO's responsibility was to 'ensure' FISMA compliance not 'enforce'. Martin...
FTC and other government agencies leaking data like a sieve
Jun 22, 2006 by Tom Fragala
Hope Yen of the AP has this story in the Seattle PI. The government agency charged with fighting identity theft said Thursday it had lost two government laptops containing sensitive personal data, the latest in a series of breaches encompassing...
USA Today's coverage of the VA data breach
Jun 22, 2006 by Tom Fragala
I was tooling around the USA today web site, and I thought I’d compile some of the stories they’ve posted on the VA data theft story. Since they are the largest US newspaper (2.5 million subs). Stories can be found...
Personal Data on 970,000 Lost in AIG Theft
Jun 23, 2006 by Tom Fragala
Dow Jones reports via CNN.com After losing personal information for 930,000 people in the theft of a computer server, American International Group Inc. (AIG) Thursday said it plans to offer identity-restoration services to any who are "fearful" that their identity...
Veterans & military getting taken advantage of?
Jun 23, 2006 by Tom Fragala
By now we’ve all heard about the data breach at the VA. And the VA announced on Wednesday they would provide free credit monitoring (and possibly credit reports) for at least a year for anyone effected. So, can someone explain...
Instructions for veterans & military if ID theft/data breach
Jun 23, 2006 by Tom Fragala
Updated 6/27/06 Are you a veteran or member of the U.S. military, including the reserve and National Guard? Wondering what to do after the computer theft/data breach at the Department of Veterans Affairs (aka VA or Veterans Administration)? Or are...
Data on 28,000 sailors and their families posted on web
Jun 24, 2006 by Tom Fragala
AP Story in the Buffalo News. This data included SSN’s so it is serious stuff. The Navy News Service also has an article. The Navy has begun a criminal investigation after Social Security numbers and other personal data for 28,000...
Let's not forget the huge AIG data breach
Jun 24, 2006 by Tom Fragala
Lost in the fuss over the VA and Navy data breaches was the disclosure last week that AIG had a computer server stolen that contained sensitive data on 970,000 customers. It’s stunning that a breach of 1 million identities is small...
AIG breach disclosed 3 months after theft
Jun 26, 2006 by Tom Fragala
InformationWeek has an article about how the data breach notification laws often result in extended times for disclosure. The AIG breach was made public over three months after the theft of the equipment. Companies can use considerable discretion in how fast,...
Vet's free credit monitoring delayed--price tag to rise to $26 billion?
Jun 26, 2006 by Tom Fragala
Update 6/26 6:20pm PT: In respone to criticism from veterans groups, the VA just announced that “An individual who chooses to sign up for the credit monitoring service, including the insurance, will not be asked or required to relinquish any...
Truston Offers Free Credit Monitoring to Save Gov't Billions
Jun 27, 2006 by Tom Fragala
A press release is going to hit the wire services shortly. We are announcing our free credit monitoring service and premium ID theft recovery services. They’ll be available in the 3rd quarter 2006. We’ve been working on this for well...
Navy Data Beach is Related to Katrina Aid
Jun 27, 2006 by Tom Fragala
I blogged about the “new” Navy-specific data breach here. It is getting lost in all the noise about the VA situation. But here’s some updated news. Navy News has the story. Personal information on more than 30,000 Navy Sailors and...
VA Asking for More Money After Data Theft
Jun 27, 2006 by Tom Fragala
Hope Yen of the AP continues her tireless reporting of this issue. The Department of Veterans Affairs is asking the President for emergency funds to cover the costs for dealing with this data breach, including credit monitoring. The VA asked...
Data breach at USDA effects 26,000 federal employees
Jun 27, 2006 by Tom Fragala
Jim at GuardMyCreditFile has this report. …the USDA was forced to announce last week that as many as 26,000 employees and contractors may have had their data accessed and stolen by hackers. The announcement is just another in a string...
Data breach at San Francisco State Univ.
Jun 28, 2006 by Tom Fragala
SF Chronicle has a story. San Francisco State University officials have put students and staff on alert because a thief broke into a faculty member's car earlier this month and stole a laptop with nearly 3,000 Social Security numbers and...
Stolen VA Laptop Found
Jun 29, 2006 by Tom Fragala
Associated Press is reporting (via Forbes.com) The government has recovered the stolen laptop computer and hard drive containing sensitive data for up to 26.5 million veterans and military personnel, Veterans Affairs Secretary Jim Nicholson said Thursday.Nicholson said law enforcement officials...
$160m for vets to come from food stamps, farmers, students
Jun 30, 2006 by Tom Fragala
The Office of Management and Budget has requested $160.5 million for free credit monitoring for veterans. One of the first things I wondered was “where does the money come from?” Well, now I know. The Office of Management and Budget...
VA worker had approval for data
Jun 30, 2006 by Tom Fragala
In a case that keeps growing, the Veterans Affairs worker whose laptop was stolen had written, documented approval to have the sensitive data on 26.5 million veterans. (Hope Yen at AP via WaPo)...
VA suffers another data breach
Jun 30, 2006 by Tom Fragala
Fort Wayne Journal Gazette is reporting that this time a computer tape was lost at an Indiana Veterans Affairs office—back in May. And it was revealed that back in 2005 the VA suffered a loss of veterans information, as well....
VA's chief information security officer resigns
Jun 30, 2006 by Tom Fragala
GovExec.com tells us that the CISO for the VA says he wasn’t able to do his job and implement security. The chief information security officer for the Veterans Affairs Department, who resigned Thursday and was subsequently placed on paid administrative...
Five Arrested in 2005 Lexis Nexis Data Breach
Jun 30, 2006 by Tom Fragala
GuardMyCreditFile has this story. Federal authorities announced today that they have arrested five people in connection with the data breach at Lexis Nexis, a data wharehousing company, last year. The breach which exposed more than 300,000 people was the largest...
Credit Bureaus Sued Over Practices That Lower Credit Scores
Jun 30, 2006 by Tom Fragala
Jim at GuardMyCreditFile exposes this questionable practice by the consumer credit reporting companies. Attorneys for William A. Harris Sr., a resident of South Carolina, have filed a class action law suit against the nation’s three large credit reporting agencies; Experian,...

