23.5.06

Personal Data on Veterans Is Stolen

Personal Data on Veterans Is Stolen

This is actually the second time this has happened. About a year ago, at a previous address I received a letter stating the same thing had happened, and I would not be able to use my Government Credit card. Well, folks, I haven't had a government credit card since 2002. I would probably be receiving the same letter now, but I left no forwarding address.

Burglary Leaves Millions at Risk Of Identity Theft

Washington Post Staff Writers
Tuesday, May 23, 2006; Page A01

As many as 26.5 million veterans were placed at risk of identity theft after an intruder stole an electronic data file this month containing their names, birth dates and Social Security numbers from the home of a Department of Veterans Affairs employee, Secretary Jim Nicholson said yesterday.

The burglary occurred May 3 in Aspen Hill, according to a source with knowledge of the incident who spoke on the condition of anonymity because the matter is under investigation.

A career data analyst, who was not authorized to take the information home, has been put on administrative leave pending the outcome of investigations by the FBI, local police and the VA inspector general, Nicholson said. He would not identify the employee by name or title.

"They believe this was a random burglary and not targeted at this data," he said. "There have been a series of burglaries in that community. . . . There is no indication at all that any use is being made of this data or even that they know that they have it." Nicholson said affected veterans include anyone discharged after 1975 and some of their spouses, as well as some veterans discharged before then who submitted a claim for VA benefits.

The theft represents the biggest unauthorized disclosure ever of Social Security data, and it could make affected veterans vulnerable to credit card fraud if the burglars realize the value of the data, one expert said.

"In terms of Social Security numbers, it's the biggest breach," said Evan Hendricks, publisher of the Privacy Times newsletter and author of the book "Credit Scores and Credit Reports." "As long as you've got that exact Social, most of the time the credit bureaus will disclose your credit report, and that enables the thief to get credit."

For years, the VA inspector general has criticized the department for lax information security, chiefly concerning the ease with which hackers might penetrate VA computer systems. "VA has not been able to effectively address its significant information security vulnerabilities and reverse the impact of its historically decentralized management approach," acting Inspector General Jon A. Wooditch wrote in a November 2005 report.

Democrats on the House Veterans Affairs Committee issued a statement calling on the department to restrict access to sensitive information to essential personnel and to enforce those restrictions. "It is a mystifying and gravely serious concern that a VA data analyst would be permitted to just walk out the VA door with such information," the statement said. Sen. Larry E. Craig (R-Idaho), chairman of the Senate Veterans Affairs Committee, said his panel will hold hearings on information security at the department.

Nicholson would not discuss specifics of the incident, saying doing so could hurt the investigation. The data do not contain medical records or financial information but in some cases show disability ratings, he said. "The employee took it home to work with it," he said. "He was working on a project . . . but he was not authorized to take it home."

According to a police report, someone pried open a window to the employee's home between 10:30 a.m. and 4:45 p.m. on May 3. The burglar or burglars took a laptop, an external drive and some coins. The theft was reported that day to Montgomery County police, according to the report.

Police think the crime may be related to a nearby break-in on the same day, the source said. Police are also investigating whether several burglaries in Rockville may be connected.

Although publicly revealing the incident may alert the thieves to the value of the data, Nicholson said VA officials decided that veterans needed to know to monitor their credit scores and credit card and bank statements. The department plans to send letters to all of the veterans to notify them that their personal information has been compromised, Nicholson said.


CONTINUED 1 2 Next

No comments:

Photobucket