Educause Security Discussion mailing list archives

Re: Bare Social Social Security Numbers


From: scott hollatz <shollatz () D UMN EDU>
Date: Mon, 27 Mar 2006 10:49:52 -0600

Quick poll (apologies for cross-posting..)

Suppose a file was stolen/accessed containing only social security
numbers with no names attached.  Would this constitute a security breach
necessitating notification of those whose numbers were compromised?
(Leaving aside the question of whether the theft/access itself is a breach).

Geoff

Another question which may answer yours:  Whose SSN is 123-45-6789 ?
And, is this message a breach?

--
scott hollatz                                        net shollatz () d UMn eDu
information technology systems and services          tel +1 218 726 8851
university of minnesota duluth mn usa                fax +1 218 726 7674
                                                                         --
                                              "Asn aD ta zlAp em uT zt33rg"

Current thread: