Newsletters Welcome, Guest Log In | Register

Editor’s Notes

Managing a business in a technology-driven world

About this Blogger RSS

Subscribe

Sign up now and get the best business technology insights direct to your inbox.

  • Daily Edge
  • CTO Edge Update
  • Business Tools & Templates
  • Aligning IT & Business Goals
  • Maximizing IT Investments

0

Personal Data Theft Proves to Be No Fun

Posted by Ken Hardin Jun 30, 2008 2:35:30 PM

Sooner or later, it was bound to happen.

 

I just finished registering for a free year's subscription to Equifax credit monitoring services. This would be kind of cool were it not for the fact that I'm getting the freebie because computers holding my personal information, including Social Security number, were stolen last month.

 

The break-in at Colt Express Outsourcing Services in California was widely reported last week. And I, apparently, am one of the 6, 500 or so former and current CNET employees who might be affected -- and certainly have been put at risk -- by burglars walking off with a little hardware from the Walnut Creek offices of the business.

 

This is disquieting -- more disquieting than I might have expected. I often remind people that we commonly just hand our credit cards to strangers (we call them "waiters") who take them out of our sight, but I never give waiters my Social Security card. Perhaps even more disquieting is the fact that I haven't worked for CNET in six year or so -- computer records are forever, after all.

 

But far and away the most disquieting aspect of this whole situation is that I have yet to find out for certain whether or not the data on the stolen machine was encrypted. The latest reports I could find from CNET say no misuse of data to be found on the machines has been reported, and my initial Equifax report is as clean as a whistle. That makes me a little less nervous, but the idea that my Social Security number may lie exposed in the hands of thieves is worrisome.

 

What makes me angry is that I even have to ask whether that data is encrypted. I have a call into CNET to see if I can get any more info, but for right now I'm stuck with this report from Privacy News that a CNET representative confirmed that the data was not encrypted.

 

Throw in this tidbit from PCWorld.com, which notes that the Colt Express CEO wrote to Maryland's attorney general to notify him of the breach, and that:

State laws typically require such notification when an unencrypted computer is lost or stolen.

and I am no happy camper.

 

How is it that a human resources outsourcer doesn't encrypt human resources data? And how is it that there's no law compelling human resources outsourcers -- or anybody who has my Social Security number -- to encrypt that information? Having somebody swipe your credit card number is a major pain -- one that I've had to deal with, and yep, it was a waiter -- but at least you can cancel a credit card. Trying to get a new Social Security number is next to impossible.

 

So, this is another thing to worry about, and not just for the next 12 months, either. And the real irritant is that it's completely unnecessary -- encryption technology is too readily available to not be mandatory for anybody who holds my personal data.

Add a comment Leave a comment on this blog post.

There are no comments on this post

Lowering Your IT Costs with Oracle Database 11g Release 2

This white paper identifies the key capabilities a database management solution needs to successfully deliver more information with higher quality of service, make more efficient use of IT budgets, and reduce the risk of change in data centers.

Software Forum: Information On Demand Virtual Experience

This interactive virtual forum presents leading IT experts providing the insights you need to turn your information into a strategic driver for innovation, business optimization and competitive differentiation.

Greening IT with Server Consolidation

Learn how virtualization reduces the TCO of managing your date, while contributing towards your sustainability efforts.

Service Oriented Architecture (SOA)

Service-Oriented Architecture is the catalyst that allows today’s companies to respond to business demands faster and more effectively than ever.

Tape Storage

Disaster recovery and business continuation that includes encryption, all at a manageable TCO.

Data Warehousing for Business Intelligence

Comprehensive storage solutions for better data access and retrieval, leading to better-informed business decisions.

All About Reducing Your IT Costs

Looking to cut costs? Use this research-driven Excel tool to pinpoint which IT cost reduction measures best fit your needs.

Learn more >

Social Media Policies Toolkit

Define the rules at your company for the proper use of social media platforms such as Blogs, Twitter, Facebook and Youtube. Ensure your users are spending their time productively and company resources are being used for the business.

Learn more >