 
  See your link here
|
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
Data brokers didn't notify consumers of past breaches
or
Other Privacy Stories
|
|
|
|
April 13, 2005 (IDG News Service) --
WASHINGTON -- Two large data brokers that recently reported data breaches potentially affecting hundreds of thousands of U.S. residents have been compromised in the past and have not notified victims, executives from the two companies told a U.S. Senate committee today.
Executives from ChoicePoint Inc. and LexisNexis, under questioning from Sen. Dianne Feinstein (D-Calif.), told the Senate Judiciary Committee that they did not report some data breaches to potential victims before a California law requiring notification went into effect in 2003.
A LexisNexis executive also told the committee that law enforcement agencies have reported 10 incidents of potential identity theft, in which new e-mail or credit-card accounts were opened, related to a recent LexisNexis breach where about 310,000 U.S. residents' records may have been compromised.
Feinstein and committee Chairman Arlen Specter (R-Pa.) questioned the two companies' efforts to notify victims during recently announced breaches of their multibillion-record databases. The companies' databases contain personal information such as driver's license numbers and Social Security numbers.
Specter demanded that LexisNexis provide a detailed explanation in writing of why the company took until Tuesday to announce that 280,000 more U.S. residents may be victims of a recent breach, up from the 32,000 people the company identified in early March (See story). LexisNexis began investigating the breach at its Seisint division, which occurred when thieves gained access to legitimate database passwords in February, said Kurt Sanford, president and CEO of U.S. corporate and federal markets for LexisNexis.
"Didn't you know about the breach in February?" Specter asked.
"I didn't know what I had until I did an investigation, Senator," Sanford answered.
Sanford didn't give an exact number, but he did say the company had some breaches it didn't report to potential victims before the California notification law went into effect. LexisNexis has uncovered 59 breaches, some dating back to early 2003, through the investigation started in February, Sanford said.
Victims of the LexisNexis breaches will get free credit report and credit monitoring services, free credit counseling services and free identity theft insurance, Sanford said. "We will begin notifying those individuals immediately," he said.
In at least one case in 2001, ChoicePoint did not report a breach to victims because it was not told of the focus of a law enforcement investigation that uncovered the compromise, said Douglas Curling, president and chief operating officer of ChoicePoint.
"If it weren't for the California law, we would have no way of knowing the breaches that have occurred," Feinstein responded.
ChoicePoint has found 45 to 50 data breaches, mostly related to a scam it announced this year, Curling said. In that incident, identity thieves used IDs stolen from legitimate
Reprinted with permission from
IDG.netStory copyright 2008 International Data Group. All rights reserved.
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
 |
| All Zones Application Performance Zone Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone Windows Protection Zone The Enterprise Search Zone Software as a Service Zone The Security Zone |
|
See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
From Laggard to Leader: Transforming the Data Center
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Get this white paper now!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
- 'Experimental' security fix is malware, Microsoft says
- 16 e-mail and instant messaging boosters
- Tough economic climate can heighten insider threat
- More top stories
Go Green with Webroot® Perimeter Security SaaS! Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance –all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! Download this white paper now!
|
 In SecurityStripping away the trappings of applications, systems and networks, information is the core asset of most organizations. Our columnist describes how asserting the importance of information governance is crucial to making that asset tangible, addressable and protected. Click here to read the latest column by Jon Espenschied |
|
|
