Educause Security Discussion mailing list archives

Bare Social Social Security Numbers


From: "Geoffrey S. Nathan" <geoffnathan () WAYNE EDU>
Date: Mon, 27 Mar 2006 11:39:47 -0500

Quick poll (apologies for cross-posting..)

Suppose a file was stolen/accessed containing only social security
numbers with no names attached.  Would this constitute a security breach
necessitating notification of those whose numbers were compromised?
(Leaving aside the question of whether the theft/access itself is a breach).

Geoff

Current thread: