Re: UVa laptop stolen, had sensitive data

["Mike Simon" <mikeasimon () gmail com>]

Typically, even a FOIA request can be refused while police are investigating
the crime. Something to do with not alerting the criminals to exactly what
the police know and what actions they are taking.

On Wed, Apr 16, 2008 at 8:16 AM, Chris Walsh <chris () cwalsh org> wrote:

> Time for somebody to FOIA the Virginia AG's office.
>
> Breaches must be centrally-reported to the AG there.
>
> cw
>
> On Wed, Apr 16, 2008 at 07:49:57AM +0000, security curmudgeon wrote:
> > ---------- Forwarded message ----------
> >
> > A laptop stolen from a University of Virginia employee contained
> sensitive
> > information about more than 7,000 students, staff and faculty members.
> >
> > Stolen from an unidentified employee from an undisclosed location in
> > Albemarle County, the laptop contained a confidential file filled with
> > names and Social Security numbers.
> >
> > "As soon as we learned about the theft, we starting moving as quickly as
> > we could," UVa spokeswoman Carol Wood said.
> >
> > UVa mailed out letters Monday to each person affected by the data
> breach.
> > The university will publicly announce the incident today. The Albemarle
> > County Police Department is investigating the theft. At the police
> > department's request, UVa is releasing few details about the incident.
> >
> > Wood declined to say when the burglary occurred or which academic
> > departments were affected. She did say, however, that the theft did not
> > occur on UVa's campus.
> _______________________________________________
> Dataloss Mailing List (dataloss () attrition org)
> http://attrition.org/dataloss
>
> Tenable Network Security offers data leakage and compliance monitoring
> solutions for large and small networks. Scan your network and monitor your
> traffic to find the data needing protection before it leaks out!
> http://www.tenablesecurity.com/products/compliance.shtml
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml