KTSU Radio volunteer behind bars for ID theft

[Erica Absetz <eabsetz () opensecurityfoundation org>]

http://www.myfoxhouston.com/story/20547670/2013/01/09/ktsu-radio-volunteer-behind-bars-for-id-theft

HOUSTON (FOX 26) -

A former KTSU Radio volunteer is behind bars on accusations he stole
personal information from hundreds of donors.

Prosecutors believe Michale Whitfield, 32, stole credit card
information from the pledge sheets of KTSU listeners and then used
that information to buy electronics and gift cards.

Assistant Harris County District Attorney Donna Logan said Whitfield
would sometimes buy products and resell them for cash.

Investigators said they have more than 20 confirmed cases.  They
believe there could be up to 300 potential victims.

Whitfield faces enhanced charges because 14 of those cases involve
senior citizens.  He is in Harris County Jail on $200,000 bond.

Texas Southern University issued this statement:

KTSU deeply regrets that it appears donors information may have been
compromised. KTSU management takes this incident seriously and will be
working with our own police department, legal counsel and other  law
enforcement officials in every way to fully resolve this matter.

At the time of this alleged incident Mr. Michael Whitfield, was not,
and is not an Employee of KTSU. He served as a volunteer for the radio
station on an as needed basis.

We want donors to know that management has taken additional measures
to ensure the security of donor information, including moving donor
records to a more secure site to encrypt donor information. We are
aggressively reviewing our  controls to ensure that this unfortunate
incident  doesn't happen again
.
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.