Saturday, MasterCard blamed a vendor of ALL credit card providers called CardSystems Solutions, Inc., a third-party processor of payment card data, as the source of loss of 40 million consumers credit card information.
As is pointed out by several newspaper and web articles over the last few weeks, each recapping long lists of financial information data breaches, something's gotta give before we entirely lose trust in financial institutions, data brokers and credit bureaus. How much privacy loss can we take without acting?
These types of data loss were very likely common and have very probably been going on for a very long time. The difference is that now, THEY ARE REQUIRED BY LAW TO DISCLOSE THOSE LOSSES - not just in California, but in many states. National disclosure laws on data security breaches are being considered in Congress.
I suggest that these breaches of data security all came to light due to the California law requiring disclosure from companies suffering hacking loss or leaks or social engineering or crooked employees or organized crime rings posing as "legitimate" customers. All of the above have been given as reasons for security lapses or poor security policies.
About three years ago, a friend told me his paycheck deposit to Bank of America went missing from account records after he took his check to the bank on Friday. By Monday, Bank of America was in the news claiming a computer glitch had disappeared the entire day's deposits. I mumbled to myself, "I'll bet that was a hack and that hacker just made a huge offshore banking deposit with B of A depositors' money."
But we didn't find out why it happened in that particular case because there was no disclosure law in place at the time. Now we have disclosure laws that mandate notice of security breaches. Now suddenly - huge financial services hacks and devious criminal social engineering outfits posing as legitimate customers and apparently "innocent" losses by transport companies of backup tapes begin to come to light.
This spate of data loss incidents is proof of the need for corporate "sunshine laws" that make public notice mandatory of those data losses that threaten customer information.
Who is going to lose here - the public, the corporations, the criminals, or the government? I'd prefer that the bad guys get the shaft and take down crooked company insiders that either facilitate data loss by underfunding security and encryption or participate in data theft or loss in any form - even if that participation is security negligence.
Financial companies and data brokers have been covering up the losses and keeping quiet about hacks so as not to worry or frighten their customers. But that practice is essentially ended now that they must notify the public and disclose those losses instead of hushing them up.
Keeping the breaches hidden from public view is bad practice as it maintains the status quo. Disclosure will facilitate internal corporate lockdowns on the data and all access to it. Disclosure will educate the public to the lack of security and danger to the sensitive information we all provide rather casually and routinely to businesses.
As the following link to a silicon.com story suggests, we cannot take much more of this lack of regard to privacy and must lock down financially sensitive data securely and must begin to hold data brokers, bureaus and handlers VERY accountable.
Insist to your elected representatives that your financial data be locked down, encrypted and guarded by those entrusted with storing, transporting and using it. Since our financial, medical and legal lives are increasingly being housed in digital form and transmitted between data centers of multiple handlers - we need to know it is secure. We also need to know when that security has been breached and our data compromised or lost.
Thieves are becoming more aware of the ease with which they can find and access financial data. Hacking is not the source of the greatest losses.
Organized crime has easily found their way into our financial records by simply paying for it by posing as "legitimate" business customers of information brokers such as ChoicePoint and Lexis/Nexis. Any business can buy financial and credit information from those information bureaus and credit reporting agencies by meeting rather lax requirements for "need to know" that data.
As long as it is possible to purchase our sensitive data from brokers and bureaus, organized crime will "legitimately" buy it from those sources, then ruin our credit by selling that information at a higher price in identity theft schemes.
Since disclosure laws have come into effect, those breaches have been made public, credit cards cancelled before losses can occur and credit reports monitored to watch for suspicious activity. The bad guys activities are squelched because we are made aware of the possibility our information has been compromised.
Not all blame can go to financial institutions and data brokers. Protect your own private data by protecting your computer records at home, in the office, on your laptop and in your PDA by using basic keyword security and locking down files. Use built in encryption on your operating system and your home network to keep data secure. Then be certain to clear that sensitive data off the computer when you sell it or throw it away.
Data security is something we all need to take seriously and the corporate breaches are dramatic illustrations of how important it has become to build digital fortresses around our critical financial, legal and medical information.
Mike Banks Valentine is a privacy advocate and blogs about privacy issues at PrivacyNotes.com You can read more about identity theft issues at: Publish101
Contact MikeValentine for Search Engine Optimization http://www.seoptimism.com
|
|
|
|
|
|
|
|
|
|
|


You may not realize it, but as you are surfing... Read More
Blaster, Welchia, Sobig, W32, Backdoor, Trojan, Melissa, Klez, Worm, Loveletter,... Read More
Security leaks can be a big problem for any site... Read More
If you constantly deal with bank or electronic accounts, it... Read More
They're out there. Individuals trying to make a quick buck... Read More
You are at your computer, checking out software on EBay.... Read More
In a word, no - an email message has always... Read More
Ebay is a great site and is used by many... Read More
On December 8, 2004 Webroot, an award winning anti-spyware solution... Read More
The IFCC (Internet Fraud Complaint Center) received over 200,000 complaint... Read More
If you have used a Windows machine for a while,... Read More
Adware. Spyware. Pesky pop up ads. Internet congestion. Computer malfunctions... Read More
There are several basic concepts to keep in mind when... Read More
So called phishers try to catch the information about the... Read More
A couple of days ago, I was searching for a... Read More
The average computer is packed with hidden software that can... Read More
My first experience with a spyware BHO based infection was... Read More
Can You Prevent Spyware, Worms, Trojans, Viruses, ... To Work... Read More
Spyware is software or hardware installed on a computer without... Read More
Internet scams and frauds are on the rise! The quantity... Read More
Viruses are, however, not the only malicious software programs out... Read More
There has not been a time in the history of... Read More
Every single time you access a website, you leave tracks.... Read More
Have you seen the web site, www.freestuff.com? Or have you... Read More
Phishing is a relatively new form of online fraud that... Read More
This is the second in a series of articles highlighting... Read More
P C. owners are constantly at risk from attacks by... Read More
Phishing is the act of some individual sending an email... Read More
First off I should explain what phishing is. Phishing is... Read More
During the release of a new software product specialized to... Read More
Business on the internet is getting down right shameless. This... Read More
Today the internet is a mine field of malicious code... Read More
Never before with Instant Messaging (IM) has a more vital... Read More


Millions of people make purchases online, but many people are... Read More
So you want to know who your kids are chatting... Read More
Remember the television show about the nosy neighbor Mrs. Kravitz... Read More
If you constantly deal with bank or electronic accounts, it... Read More
Viruses are, however, not the only malicious software programs out... Read More
No, this article isn't about some new, lose-20-pounds-in-a-week, certified-by-some-tan-Southern-California-doctor diet.... Read More
Industrial Espionage. These methodologies are being used on a daily... Read More
Blaster, Welchia, Sobig, W32, Backdoor, Trojan, Melissa, Klez, Worm, Loveletter,... Read More
Pharming is one of the latest online scams and rapidly... Read More
Imagine my surprise when I received a phone call from... Read More
Phishing: (fish'ing) (n.)This is when someone sends you an email... Read More
Can you protect your computer from all possible viruses and... Read More
A firewall is a system or gateway that prevents unauthorized... Read More
Have been an Internet user for more than 9 years,... Read More
Sooner or later everyone with an email account will receive... Read More
For many, the daily walk to the mailbox evokes mixed... Read More
Your computer is as slow as molasses. Your mouse freezes... Read More
"Dear Bank of the West customer", the message begins. I've... Read More
First the basic definition of Spyware: It is a type... Read More
Working from home has its advantages, including no commute, a... Read More
Business on the internet is getting down right shameless. This... Read More
The Message Must Get Through The year is 300A.D.,... Read More
According to the Anti-Phishing Working Group (APWG) email scams also... Read More
The Threat10 years ago you could probably have run no... Read More
The internet is undoubtedly a fantastic resource for families and... Read More
You are at your computer, checking out software on EBay.... Read More
Nobody wants to pay to remove spyware. At the very... Read More
These six ways to prevent identity theft offer you valuable... Read More
This really chapped my lips...I recently bought a new computer.... Read More
1)Spyware is on your system. Like it or not, statistically... Read More
This is the second in a series of articles highlighting... Read More
Someone recently told me, "You would have to be a... Read More
The Federal Bureau of Investigation has identified "phishing" as the... Read More
Internet Security |