AR: Records of Criminal Background Checks Run in Arkansas Potentially Exposed

[kirniki <kirniki () gmail com>]

http://www.arktimes.com/blogs/arkansasblog/2009/02/potential_security_breach.aspx

The Arkansas Department of Information Systems (DIS) was informed at
the end of January that a vendor providing secure off-site storage for
electronic records and computer files was unable to locate a DIS
computer tape in its inventory.  The tape contained information from
criminal-background checks run on approximately 807,000 people over at
least 12 years.

The vendor, Information Vaulting Services (IVS), had records showing
the tape in its possession, but a thorough search of their facility
failed to turn up the tape.  Arkansas State Police has investigated
and to this point has found no evidence of an intentional security
breach or other wrongdoing.  IVS believes there is little risk that
this information has been compromised.  Nonetheless, since IVS cannot
account for the tape, DIS officials have decided to take the
precautionary measure of alerting the public about the potential
exposure of this information.

"We have taken every step possible to recreate where the loss of these
backup tapes occurred, and these tapes were redundant, second extra
copies, of information," Danny Palo, Chief Operating Officer of IVS,
said. "This is the first time in six years of service to DIS that this
has happened.  IVS has immediately taken steps to tighten procedures
that will virtually eliminate the possibility of this ever happening
again."

Anyone who has undergone a criminal-background check in Arkansas since
the mid-1990s, and wants to know if his/her personal information was
included on the lost computer tape, can find out either by phone or on
the Internet.  By calling 1-888-682-0411 or going online to
notify.arkansas.gov, interested parties can determine if their name is
on the list by entering or sharing their first name, last name at the
time of the background check and their date of birth.  No other
personal information will be asked for, even for verification
purposes.  The call center will be staffed Monday through Friday from
8:00 a.m. through 5:00 p.m.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

CREDANT Technologies, a leader in data security, offers advanced data encryption solutions.
Protect sensitive data on desktops, laptops, smartphones and USB sticks transparently 
across your enterprise to ensure regulatory compliance.
http://www.credant.com/stopdataloss