BreachExchange mailing list archives

Equifax tax forms expose worker Social Security numbers


From: kirniki <kirniki () gmail com>
Date: Thu, 11 Feb 2010 22:29:03 -0500

http://news.cnet.com/8301-27080_3-10452004-245.html

An unknown number of current and former employees of credit reporting
firm Equifax received W-2 forms in the mail with their Social Security
numbers visible through a window on the envelope, CNET has learned.

Equifax became aware of the problem on January 19 and informed
employees in a letter dated January 27, according to a copy of the
letter obtained by CNET.

Specifically, some of the tax forms mailed by Equifax's payroll vendor
through the U.S. Postal Service had the Social Security number in a
Control Number field, which was partially or fully viewable through
the return address window, Coretha Rushing, chief human resources
officer at Equifax, wrote in the letter. "Control Numbers were
intended to be a unique number, not a SSN," she said.
[..]
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php


Current thread: