CO DMV data leakage issue(s)

[Henry Brown <hbrown () knology net>]

http://origin.denverpost.com/breakingnews/ci_9822063

DMV puts Coloradans at risk of ID theft
By Jessica Fender
The Denver Post
Article Last Updated: 07/09/2008 06:10:43 AM MDT

The Division of Motor Vehicles put 3.4 million Coloradans at risk of 
identity theft due to flaws in the way driver's-license information is 
handled, lawmakers learned Tuesday at an interim transportation 
committee hearing.

The DMV regularly sends large batches of personal information over the 
Internet without encryption and has failed to properly limit access to 
its database, according to a recent audit. At one point, 33 former DMV 
employees could access names, addresses, dates of birth and Social 
Security numbers — some workers more than a year after their departure, 
auditors found.

[...]

Auditors said the DMV's method for handling sensitive information was 
"fragmented, disorganized and poorly planned," partly because the 
division is made up of a number of decentralized offices scattered 
across the state. No one person is responsible for security.

[...]



_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml