Ads by TechWords

See your link here
Receive the latest technology news and information.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Quarterback sacked by Texas state Web site

Secretary of State's data display smacks of hypocrisy, critics charge

July 19, 2007 12:00 PM ET

IDG News Service - Troy Aikman may not be happy about it, but the state of Texas has made his address and Social Security number available via the Internet.

Sensitive information on Aikman, formerly a star quarterback with the Dallas Cowboys, and thousands of others is available on the Texas secretary of State's SOSDirect Web site, according to Steven Peisner, the president of fraud prevention vendor Sellitsafe Inc., who has provided IDG News Service with a half-dozen examples of Social Security numbers he was able to obtain from the site.

As government pushes more and more documents online, Texas is one of many state and local governments across the U.S. that is now struggling to remove sensitive information so that it cannot be misused by criminals.

Peisner found Social Security numbers on tax liens and on loan agreement notifications filed with the state, called Uniform Commercial Code (UCC) financing statements.

Texas has been automatically removing sensitive information from all documents filed with SOSDirect since June 2005, and the state is now in the process of redacting this information from earlier filings, said Scott Haywood, a spokesman with the Office of the Texas Secretary of State. But residents whose Social Security numbers are posted on SOSDirect need to contact the secretary of State's office directly in order to have them removed right away, he added.

That's not good enough for Peisner.

"It's pretty cheap to do that... to make someone send in a request," he said. "There are literally hundreds of thousands of documents where Social Security numbers [are exposed]."

He thought that Texas should follow the lead of states like California and Colorado, which shut down access to their UCC databases earlier this year when privacy advocates notified them that they could be misused by identity thieves.

Users must submit a credit card number in order to search the Texas database, but Peisner said that lax security makes that barrier meaningless to most hackers. He said he was able to get access to information using a fake name and without providing the three-digit security code listed on the back of most cards. He believes that criminals could obtain information from the site using phony credit card numbers.

Peisner said he spoke with staffers at the Texas secretary of State's office of his concerns last week, but to no avail. "You would think if somebody called up and said that this Web site has a hole so big that you could drive the Spruce Goose through it, that they would take it down."

One privacy advocate agreed with Peisner.

A name and Social Security number is all that criminals need to set up a phony credit card application, said Beth Givens, director of Privacy Rights Clearinghouse. "They need to immediately take action and take that Web site offline and in some other way remove or redact [the information]," she said.


Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.

Jump to comments

troy aikman

Additional Resources

EFD vs. HDD - What You Need to Know
WHITE PAPER
Enterprise flash drives provide a new Tier 0 storage layer capable of delivering high I/O performance at a very low latency. Proper use of EFDs in an Oracle environment can deliver increased performance compared to fibre channel drives. Read the recommendations for identification of the best DB components for EFDs.
Gartner Research Report: Magic Quadrant for Application Delivery Controllers, 2009
WHITE PAPER
The market for products to improve the delivery of application software over networks remains dynamic and innovative. Vendors focused on solving enterprises' most-pressing application problems have become the top players.
Eight Criteria for Server Load Balancing
WHITE PAPER
Server load balancers are a simple yet highly effective means to scale an application environment while ensuring its availability. Today's solutions should also address application performance and security. Read about the top eight criteria you should consider when choosing a server load balancer and how Citrix NetScaler meets those requirements.

What People Are Saying

White Papers & Webcasts

Death to PST Files
Download Now  

Web 2.0, Social Media and the Dark Web - A Web Criminals Paradise?
In this discussion, learn about the challenges of protecting your users from the potentially unsafe content hidden in the "Dark Web".

eGuide: Enterprise Security
Smart Security Strategies for 2010. Read now!  

Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...


IT Jobs