February 10, 2008   Sign In |  About ebizQ |  Contact Us |  Join ebizQ Gold Club
Andre Yee
Andre Yee's Security Insider
An open dialogue about security and compliance for the enterprise.

« Should the Security Industry Exist? | Main | Google Sponsored Links - Open Door to Malware Site? »

April 30, 2007
Another Privacy Exposure on the Web

This is becoming old hat but another huge privacy exposure was revealed over a week ago. Apparently, 63,000 SSNs of individuals who received Department of Agriculture grants have been out in public view since 1996. The offending website was FedSpending.org and the problem has since been corrected. It's hard to blame FedSpending, a group created by OMB Watch to keep an eye on government spending, since it essentially publishes government contracts and legal documents in a free, searchable database.
The real problem is that privacy info in government related documents like loans and grants are passed around indiscriminately. It makes one question if more blatant privacy breaches are out there.

Here's how it was discovered. Marsha Bergmeier, president of Mohr Family Farms found the breach when she googled her farm name. To her surprise, the details of her land loan including her SSN came up. She immediately notified the Department of Agriculture, her congressman and the website concerned and the problem was quickly corrected. Of course, Ms Bergmeier understands that her privacy info may not ever be private again.

"If somebody downloaded it, it's still out there in the world," she said. "That will never be a private number again."

The Agriculture Department's response?

"There is no evidence that this information has been misused...However, due to the potential that this information was downloaded prior to being removed, USDA will provide the additional monitoring service."

That's comforting, I guess.

Posted by andreyee in Privacy/Information Theft |Digg This|Add to del.icio.us

Trackback Pings

TrackBack URL for this entry:
http://www.ebizq.net/mt/mt-tb.cgi/1751

Comments Post a comment




Remember Me?

(you may use HTML tags for style)

We ask that you type your code (displayed below) in the text box.This code is an image that cannot be read by a machine. It prevents automated programs from submitting comments.


Code:



Most Recent ebizQ Blog Entries
ADVERTISEMENT
RSS Subscription

Blog Roll
This Work
Accountability:The opinions expressed in this blog are solely representative of the blog's author, and not of ebizQ

Subscribe to our Newsletters
ebizQ Weekly Gold Club Update
Live Webinar Updates
Updates from ebizQ Partners
ebizQ SOA Update
ebizQ BPM Update
ebizQ Security Update
ebizQ BI Update
ebizQ Open Source Software Update
Virtual Show Newsletter
Your E-mail Address:
BAM: The Killer App for CEP
Date: Feb 12, 2008
Time: 12:00 PM ET
(17:00 GMT)

I WANT TO ATTEND
Event Processing Market Pulse
Date: Feb 14, 2008
Time: 12:00 PM ET
(17:00 GMT)

I WANT TO ATTEND
Archived Webinars | Upcoming Webinars

Marketing Solutions | Feedback | About ebizQ | Unsubscribe | Privacy Policy | Site Map