BreachExchange mailing list archives

(update) Missing TSA computer drive not protected


From: lyger <lyger () attrition org>
Date: Mon, 16 Jul 2007 23:43:49 +0000 (UTC)


http://www.star-telegram.com/464/story/170815.html

The Transportation Security Administration did not follow White House 
instructions to protect sensitive information on a computer hard drive 
containing bank and payroll data for 100,000 employees that was discovered 
missing, the agency acknowledged to Congress.

Authorities realized in May the storage device, an external hard drive, 
was missing from TSA headquarters. In a letter to Rep. Ed Markey, D-Mass., 
the agency said the drive contained historical payroll data, Social 
Security numbers, dates of birth, addresses, time and leave data, bank 
account and routing information, and details about financial allotments 
and deductions.

[.]

The lack of any encryption means any computer user who connects the drive 
to a laptop or desktop PC can view all the information without any special 
software tools.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 213 million compromised records in 720 incidents over 7 years.


Current thread: