Computerworld
Quick Menu
Search



Ads by TechWords

See your link here


Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Offshore outsourcing cited in Florida data leak

State employees are being warned that their personal data may have been compromised
 

Sign up to receive Security Resource Alerts

March 26, 2006 (IDG News Service) -- Florida state employees are being warned that their personal information may have been compromised after work on the state's People First payroll and human resources system was improperly subcontracted to a company in India.

Employees who worked for the state during the 18-month period between Jan. 1, 2003, and June 30, 2004, may be affected, according to an e-mail message sent to all state employees on March 16. The state's Department of Management Services (DMS), which oversees the People First system, estimates that 108,000 current and former state employees may be affected by the data breach, although that estimate could change as the department's investigation into the matter continues.

The e-mail was sent after a subcontractor of outsourcing service provider Convergys Corp. improperly allowed subcontractors in India to index state personnel files, said DMS spokeswoman Tiffany Koenigkramer. The offshoring was done as part of Convergys's nine-year, $350 million contract to manage the state's personnel work.

Convergys had subcontracted the indexing work to GDXdata Inc., in Denver, which itself turned to a subcontractor in India, a violation of the GDXdata contract with Convergys, the DMS said. Convergys has since cancelled its contract with GDXdata, the agency said.

Convergys said the offshore work was done without its knowledge. "Convergys was misled by GDX, one of several subcontractors hired to perform work for the state of Florida," the company said in a statement.

The offshore work was made public in late December, when documents were unsealed in a "whistle-blower" lawsuit brought against GDXdata by two former employees.

The DMS is investigating the matter, but it has so far detected "no known cases of credit fraud or identity fraud that resulted from this work," Koenigkramer said.

"It is common today for businesses and even government to use offshore companies," the DMS March 16 e-mail states. "However, the use of offshore services in this case was inappropriate and unacceptable."

Convergys and the DMS expect to provide affected employees with a credit-protection plan this week, Koenigkramer said.

That is not enough for one of the state's public-employee unions, which is calling for an end to the Convergys deal and saying that the People First system has been mismanaged. "We want this thing killed," said Doug Martin, communications director at the American Federation of State, County and Municipal Employees, Council 79. "This is a joke, and the sad thing is, we're paying for it."

State Sen. Walter "Skip" Campbell, a Democrat who would also like to see the contract pulled, called the outsourcing a "critical security breach," in part because it inappropriately exposed sensitive information about the state's law enforcement agents. "We don't know how far the dissemination of this information has gone," he said.

Based in Cincinnati, Convergys is a provider of billing, customer service and human resources outsourcing services. It reported $2.5 billion in revenue last year, according to the company's Web site.

A spokeswoman for GDXdata declined to comment for this story.


Reprinted with permission from

IDG.net
Story copyright 2008 International Data Group. All rights reserved.


Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
Hacker hits Georgia state database via hole in security software
Ohio recalls voter registration CDs; Social Security numbers included
Laptop theft at Fidelity exposes data on 196,000 HP workers
Offshore outsourcing cited in Florida data leak
Ohio University reports two separate security breaches
FTC imposes $10M fine against ChoicePoint for data breach
Creative Bungling: IT Can't Stop All Data Breaches
Debit card fraud outbreak raises questions about data breach
Data exposure: Counties across the U.S. posting sensitive info online
Update: Fla. residents' data exposure a statewide issue
Analysis: Data breach notification law unlikely this year
Arrests made in debit card fraud case
'Human error' exposes patients' Social Security numbers in N.C.
Lessons learned from corporate security breaches
Aetna says laptop stolen with data on 38,000 members
Update: Thief nabs backup data on 365,000 patients
N.H. IT worker disputes state government security breach
Registrar's database said to have exposed data
Honeywell blames ex-employee in data leak
Confidential patient data sent to wrong company -- for 15 months
Data exposure: Using software to redact personal data from public documents
Idaho utility hard drives -- and data -- turn up on eBay
Bank tape lost with data on 90,000 customers
Security snafu at Boston Globe exposes subscriber data
FBI: No credit card data breach in N.H. state server case
"Need help sorting through the hype of cloud computing? Here's some IDC research on the benefits, barriers -- and what..." Read more...
"Stephen Spoonamore offers more details on what I was trying to drive home in my recent column: Because individual votes..." Read more...
Read more Security posts or See all Blogs
IBM launches Bluehouse, a Facebook for business
iPhone grabs top smart phone spot
Wi-Fi helps college students get better grades, survey says
More top stories...
Microsoft scales out SQL Server 2008, wants to 'democratize BI'
Oracle tries to step up on high-end databases
NASA spacecraft successfully snaps pics of Mercury
Too much junk food, too little exercise and a 24/7 tether to technology? Your body ain't happy, friend. Let us count the pains.
Instruments on the surface of Mars have detected falling snow that is likely evaporating before it reaches the planet.
One positive development stemming from the collapse of Wall Street may be a boost in interest in computer science and IT careers among students who were previously interested in financial services jobs.
Getting new software installed on Linux doesn't have to be hard, but it can differ depending on what you're installing.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Business Continuity Zone
The File Data Management Zone
Security Management Zone
The SAS Zone
Business Intelligence and Analytics Zone
Windows Protection Zone
The Enterprise Search Zone
Software as a Service Zone

Ads by TechWords

See your link here
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center
Register for this complimentary webcast today!
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Intercept Spam & Viruses
Download this whitepaper to learn how to outsmart spam & viruses, compliments of MessageLabs.
(Source: MessageLabs) Register for a complimentary 30 day trial of MessageLabs' new managed Anti-virus and Anti-spam security solutions. MessageLabs guarantees complete protection against all known and unknown email threats. By providing 24 hour support, your business can increase productivity and decrease risk.Register now for a complimentary trial and receive a free datasheet.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Project Portfolio Management - Boost the value of IT
Core Network Services Survey: The Costs and Impacts of DNS and IP Address Management
Six Project Metrics Every CIO Should Know for Application Delivery Success
View more whitepapers