Government Moves Away from SSN as Identifier

February 22, 2011 – 12:42 pm

The Department of Defense proclaims, “The national security depends on our defense installations and facilities being in the right place, at the right time, with the right qualities and capacities to protect our national resources.” But by relying on Social Security numbers as primary identifiers, this same organization puts the identities of soldiers and their families at risk.

Last month, four West Point professors released a journal article arguing, “Despite the Defense Department’s recent advances in protecting personally identifiable information such as Social Security numbers, the military continues to have a ‘cultural disregard’ for PII.” The professors also pointed out that since the first digits of a Social Security number can be deduced based on birth year and location, restricting use to the last four digits does not adequately preclude identity theft.

In 2007, an Office of Management and Budget memo ordered agencies to eliminate all nonessential uses of Social Security numbers, and the Department of Defense is currently working on limiting its use of the numbers.

If you are a soldier or have a family member away on leave, there are two ways to protect yourself or your family member:

1. Place an “act Read more…

Personal Medical Records of 1.7 Million Stolen

February 18, 2011 – 4:43 am

The personal health data for about 1.7 million New York City patients and hospital workers was stolen from an unlocked van in Manhattan.  The van belonged to the city’s medical vendor, GRM Information Management Services.

The 20 years worth of electronic files were stored on magnetic tapes that contained personal information and protected health information of patients, contractors and vendors.  The personal information included names, addresses and Social Security numbers. Thos

Read more…

Tags: Million Stolen, Stolen

Criminal Hackers Responsible For Most Data Breaches

February 17, 2011 – 9:49 pm

According to the Identity Theft Resource Center, there were at least 662 data breaches in 2010, which exposed more than 16 million records. Nearly two-thirds of breaches exposed Social Security numbers, and 26% involved credit or debit card data.

The ITRC elaborated, “Other than breaches reported by the media and a few progressive state websites, there is little or no information available on many data breach events that occur. It is clear that without a mandatory national reporting requirement, many data breaches will continue to be unreported, or under-reported.”

The majority of these attacks were malicious hacks or insider theft, rather than the result of employee errors. InformationWeek reports, “Some states, but not all, have data breach notification laws, which require any organization that suffers a breach to notify that state’s affected residents. Interestingly, the ITRC found that information about 29% of the 662 reported breaches for 2010 could be credited to authorities in those states.”

The Privacy Rights Clearinghouse’s Chronology of Data Breaches found that more than 500 million sensitive records have been breached in the past five years. Examples of

Read more…

Tags: Breaches, Data Breaches

RSA 2011 Video Series: For Those Who Missed The Conference…

February 16, 2011 – 10:20 am

With RSA 2011 right in our rear-view mirror, we thought it would be appropriate to showcase a number of videos from the big event. And, if you missed out on RSA 2011, fret not. This video series will make you feel as if you were actually there. See you next year at RSA 2012!

RSA Conference 2011 Opening Keynote

Art Coviello Show Insights – RSA Conference 2011

Cloud Security Alliance at RSA 2011 – Keynote: Vivek Kundra CIO White House Part 1

Revere Security – Knight Trailer for 2011 RSA Conference (Great promotional ad)

Tags: Missed, Rsa 2011, Video Series

How Does Device Reputation Protect Me?

February 6, 2011 – 5:15 am

Device reputation spots online evildoers by examining the computer, smartphone, or tablet they are using to connect to any website. If a device is recognized as having previously committed some type of unwanted behavior, the website has the opportunity to reject the transaction, preventing damage before it occurs.

In the physical world, as the saying goes, “You are only as good as your word.” And when somebody says one thing and does another, we no longer trust them.

Online, people say and do things they never would in the real world. Internet anonymity fuels bad behavior. Websites’ comments sections are filled with vitriol that you’d never hear real people utter. Pedophiles who’d never approach a child on the street contact kids over the Internet. Sex offenders avoid the stigma of their label on dating sites and social media. Scammers create accounts in order to con people and businesses into forking over money. And ident

Read more…

Tags: Device Reputation, Reputation