Archive for the 'Internet Posting' Category

Louisiana Board of Regents Exposes Data Online

Monday, July 23rd, 2007

Data Loss Source: Records of students and staff including Social Security numbers, names, and addresses exposed on the Web by the Louisiana Board of Regents. In all, more than 80,000 names and Social Security numbers were accessible for perhaps as long as two years on an internal Internet site.
Date of Loss: July 17, 2007
Size of Loss: 80,000
Affected Individuals: Students and staff of schools in Louisiana
Geographic Focus: Baton Rouge, LA
Data contained: Social Security numbers, names, and addresses
Additional Notes:: The breach was discovered in an unusual way. A law school student in Louisiana, wanted to prove a point about user privacy. He started Googling — and ended up with names, addresses, Social Security numbers, and other personal data on some 80,000 students and employees in the state’s university system.
Additional Information : Forbes

Cherokee County, Georgia: All the stuff we scan, we post!

Tuesday, October 31st, 2006

Data Loss Source:  Posted on county website
Date of Loss:  October 2006
Size of Loss: Unknown
Affected Individuals:  If Cherokee County Georgia has your records – you’re hosed.
Geographic Focus:  Cherokee County, Georgia
Data contained:  Anything they have including SSNs
Additional Notes:  “I’m required by law not to alter the document and by law I cannot alter the document,” said Cherokee County Clerk of Courts, Patty Baker.

Additional Information:  Newslink

Chicago: Vote early and often aided by ID Thieves…

Wednesday, October 25th, 2006

Data Loss Source: Open Website
Date of Loss: The past six years…
Size of Loss: 1.35 million files
Affected Individuals: Registered Voters in Cook County, IL
Geographic Focus: Cook County, IL
Data contained: Social Security numbers, and dates of birth and other personal information
Additional Notes: The breach was the result of a website having an open vulnerability.
Additional Information: Newslink Newslink Newslink

Florida Dept. of Labor: Guys, this is a little TOO MUCH sunshine…

Friday, October 13th, 2006

Data Loss Source: Posted on the internet
Date of Loss: September 2006
Size of Loss: 4,624 files
Affected Individuals: 4,624 individuals, all of whom had enrolled for services with one of the 24 regional workforce boards across the state
Geographic Focus: Florida
Data contained: Names and Social Security numbers
Additional Notes: The names and Social Security numbers made it online around Sept. 1, when a workforce agency staffer in Tallahassee was uploading information to a “test server” and accidentally included the confidential data.
Additional Information: News Link

Berks County Sherriff’s Office: Well, at least burglars know NOT to go to these houses…

Tuesday, October 10th, 2006

Data Loss Source:  Posted on the Internet
Date of Loss:  September 2006
Size of Loss: 25,000 files
Affected Individuals:  Gun permit holders
Geographic Focus:  Berks County, PA
Data contained:  Names, addresses, SSN and other personal information.
Additional Notes:  Berks County Sheriff Barry J. Jozwiak was trying to comply with a court order to create a more secure list of gun-permit holders when an outside contractor left at least some of the list exposed on the Internet.  An employee of a California software firm also spotted the Web site, realized it was confidential and notified the sheriff, officials said.

That’s what you get when you go with the lowest bidder…
Additional Information:   News Link