Use of Commercial Independent Risk Analysis Services Blanket Purchase Agreements (BPA) (February 4, 2008) (4 pages, PDF) “The purpose of this memorandum is to alert you to the establishment of government-wide blanket purchase agreements (BPAs) for independent risk analysis services and encourage agency consideration of these vehicles to the maximum extent practicable. In the event… Continue Reading
Accurate, Focused Research on Law, Technology and Knowledge Discovery Since 2002
Category Archives: ID Theft
Privacy Rights Clearinghouse: A Chronology of Data Breaches
A Chronology of Data Breaches, updated January 30, 2008 Continue Reading
Department of Commerce Breach Notification Response Plan
Department of Commerce Breach Notification Response Plan, September 28, 2007 (21 pages, PDF) This Plan identifies key Department officials who will serve on the Identity Theft Task Force (ID Theft Task Force) to develop strategies for handling data security breaches, including those incidents posing a potential risk of identity theft. In addition, the Plan specifies… Continue Reading
OPM Tells Federal Agencies to Limit Use of Employee Social Security Numbers
Federal Times: “The administration last week told agencies not to use federal employees Social Security numbers as primary identifiers for data processing purposes. The Office of Personnel Management said in a Jan. 18 notice that agencies must not print the numbers on paper or display on computer screens except in secure areas. And only employees… Continue Reading
Open Access to Personal Data on E-Gov Sites Expose Citizens to ID Theft
Washington Post, Online Records May Aid ID Theft, Government Sites Post Personal Data, By Bill Brubaker: “Social Security numbers are readily available in many courthouses — in land records and criminal and civil case files — as well as on many government Web sites that serve up public documents with a few clicks of a… Continue Reading
CDT: Passport Card Rule Will Weaken Border Security and Privacy
“Today, the Department of State released a final rule for the new “Passport Card,” which is intended to be used by American citizens who frequently travel by land or sea to Canada, Mexico, the Caribbean, and Bermuda. The new rule calls for the use of “vicinity read” RFID technology without the use of encryption. This… Continue Reading
FTC Issues Staff Report on Malicious Spam and Phishing
Press release: “In a new report, the Federal Trade Commission staff describes findings from its July 2007 workshop, Spam Summit: The Next Generation of Threats and Solutions and proposes follow-up action steps that stakeholders can adopt to mitigate the harmful effects of malicious spam and phishing. In addition to proposing action steps for stakeholders, the… Continue Reading
2007 Annual Study: U.S. Cost of a Data Breach
Ponemon 2007 Annual Study: U.S. Cost of a Data Breach – Understanding Financial Impact, Customer Turnover, and Preventitive Solutions: This study “was derived from a detailed analysis of 35 data breach incidents. According to the study, the cost per compromised customer record increased in 2007, compared to 2006. Lost business opportunity, including losses associated with… Continue Reading
FTC Testifies on Efforts to Combat Identity Theft and Protect Consumer Privacy
Press release: “The Federal Trade Commission today told the House Judiciary Committees Subcommittee on Crime, Terrorism, and Homeland Security that identity theft remains one of the highest priorities for the Commission, and that the agency is playing a lead role in preventing identity theft and helping those who are victimized.” Prepared Statement of the Federal… Continue Reading
Federal Law Requires All Businesses to Truncate Credit Card Information on Receipts
Press release: “As merchants get busier with holiday shopping, the Federal Trade Commission reminds them to be sure the credit and debit card receipts they give customers comply with federal law. To reduce the risk of fraud and identity theft, the electronically printed credit and debit card receipts given to consumers must not include more… Continue Reading
Widespread Use and Availability of Social Security Numbers Puts Americans at Risk for ID Theft
Press release: “The widespread use and availability of Social Security numbers puts Americans at risk for identity theft and should be restricted, according to Consumers Union, nonprofit publisher of Consumer Reports. The group urged policymakers to take action to protect consumers as part of a public forum on the issue organized by the Federal Trade… Continue Reading
Annual McAfee Virtual Criminology Report
McAfee Virtual Criminology Report – Cybercrime: The Next Wave – The annual McAfee global cyber trends study into organized crime and the Internet in collaboration with leading international security experts, November 2007. “For this report we consulted with more than a dozen security specialists at top institutions such as NATO, the FBI, SOCA, the Center… Continue Reading
