Data Compromises Across America (102105)
Hawaii–130,000 Social Security Numbers Lost
The Social Security numbers of 130,000 former and current Wilcox Memorial Hospital patients have been lost due to the disappearance of a back-up computer data drive, a hospital spokesperson said.
The drive was reported missing on Wednesday, Oct. 5, according to Lani Yukimura, marketing director for Wilcox Health (Wilcox Memorial Hospital and Kauai Medical Clinic).
The data refers only to hospital patients, and does not include medical information, but does include names, addresses, medical record numbers and, as mentioned, Social Security numbers.
The data file goes back 12 years, according to Yukimura.
….. Yukimura said the data on the drive was not encrypted, and is readable with Adobe Acrobat Reader.
New Jersey: University error raises risk of identity theft: Social Security numbers were searchable for almost five months
A mistake made by an MSU (Montclair State) employee has put more than 75 percent of the university’s undergraduates at risk for identity theft, a crime in which one’s personal information is stolen by another for financial gain.
For the past five months, the Social Security numbers of 9,100 MSU undergraduates were searchable by Internet search engines such as Google.com. The university was advised of the problem on Oct. 7 when a student, who found his personal information online after an Internet search, contacted MSU’s Information Technology Department.
According to Ann Frechette, MSU’s executive director of communications and marketing, a university employee accidentally stored the Social Security numbers and declared majors of the students on MSU’s Web server. The employee, Frechette said, believed the files were secure, or nonsearchable, because they were not linked onto the university’s Web site.
“But in fact, anything stored on the Web server is searchable by Web engines,†Frechette said. “We have invested heavily to have a secure firewall for the university. You could grow old trying to hack into MSU’s system. But again, within those walls, there is a potential for human error.â€
Identity-Stealing Spyware on the Rise–Are Key Logging Programs Operating on 15% of Computers?
Okay, it’s a press release, which is why the item has a question mark. So even if only half-true, it’s sobering:
CHARLOTTESVILLE, Va., Oct. 11 /PRNewswire/ — Do you know who’s stealing your identity? Until just a few months ago, the odds were that it was someone in your family or neighborhood. Today, however, there is someone far more savvy and distant stealing your identity. There are currently 26.7 million Americans who are unwittingly transmitting their identity to international hackers and criminals.
In a recent study conducted by the Alladin Knowledge Systems of the top 2,000 known spyware threats, they found that 15 percent of spyware is actually stealing all the information typed on an infected computer, by logging the information the user types and then transmitting it to the spyware’s creator.
This method is called “key logging,” and was the cause for five percent of the identity theft cases last year.
There are currently over 223 million Internet users in the United States (http://www.internetworldstats.com/america.htm). According to the National Cyber Security Alliance 80 to 90 percent of desktops are infected with spyware. At 80 percent, that’s 187.4 million Internet users affected by spyware. With 15 percent of those transmitting the information needed for identity theft, that’s 26.7 million people in the U.S. alone transmitting their identities to international hackers and criminals.
Last year, there were approximately 10 million cases of identity theft in the U.S., resulting in losses of over $50 billion, of which spyware comprised only 5 percent ($2.5 billion). The average identity theft case resulted in $5,000 in damage. If we do not do something to stop the flood of spyware, we could be looking at over $133 billion in losses this year due to spyware alone.










