Update: Fla. residents' data exposure a statewide issue
Social Security numbers, bank info is available via county Web sites
Computerworld - The Social Security numbers, driver's license information and bank account details belonging to potentially millions of current and former residents of Florida are available to anyone on the Internet because sensitive information has not been redacted from public records being posted on county Web sites.
Although questions about the availability of personal data online initially focused on Broward County, an official there stressed today that all counties in Florida are subject to the same state law. A spot check of other county Web sites today confirmed that sensitive data is easily available through public property records.
In fact, according to Sue Baldwin, director of the Broward County Records Division, counties across the nation face the same issue.
"Land records are public all over the country. This is not a new situation," said Baldwin, adding that the same issue affects "all the counties in Florida ... [and] lots of states."
In fact, the Ohio secretary of state is being sued for posting residents Social Security numbers for years on state Web sites where publicly searchable records are stored (see "Ohio secretary of state sued over ID info posted online").
"All this information has been out there and available since the beginning of time," Baldwin said. "It was out there, and the people who were educated about it knew it was there. It's been online since 1999."
She noted that the information on the Web is in full compliance with state statutes that require counties to post public documents on the Internet.
Bruce Hogman, a county resident who raised concerns about the availability of information with the Broward County Records Division about two weeks ago, said it poses a serious risk of identity theft and fraud.
The exposure stems from the countys failure to redact, or remove, sensitive data from images of public documents such as property records and family court documents, Hogman said. Included in the documents publicly available are dates of birth and Social Security numbers of minors, images of signatures, passport numbers, green-card details and bank account information.
Here is the latest treasure trove available to identity thieves, and it is free to the public, courtesy of the Florida state legislature in its great Internet savvy, Hogman said. The easy availability of such sensitive data also poses a security threat at a time of heightened terrorist concerns, he said.
Baldwin said the county is aware of Hogmans concerns but said state laws require all state recorders to maintain a Web site for official records. To meet those statutory requirements, the public records search section of www.broward.org contains images of public records dating to 1978, many of which are likely to contain sensitive information such as Social Security numbers, she said.
- Warning: Cloud Data at Risk Experts agree that relying on SaaS vendors to backup and restore your data is dangerous. Yet that's exactly what huge portions of the...
- Where You Mitigate Heartbleed Matters Read this article to learn more about why customers must choose the most strategic point in the network at which to deploy their...
- Do More With Less: How CARFAX Consolidated Their Security Solutions Through a consolidated F5 solution, CARFAX cut site downtime to zero, secures its data, and deployed a high-performance infrastructure to support its rapid...
- Fight Malware, Malfeasance and Malingering Every year brings more extreme sets of threats than the last. The good news is that there are a range of mitigation options....
- Data Protection and Disaster Recovery with iSCSI and VMware Get this on demand webcast now
- Keep Servers Up and Running and Attackers in the Dark An SSL/TLS handshake requires at least 10 times more processing power on a server than on the client. SSL renegotiation attacks can readily... All Privacy White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!