June 23, 2006

FTC laptops stolen, along with personal data

Government worker violated security policies by taking the sensitive data home

The U.S. Federal Trade Commission is notifying 110 people that two laptop computers containing their personal data were stolen from a locked vehicle.

The information includes individuals' names, addresses, Social Security numbers, birth dates and "in some cases, financial account numbers," the regulatory agency said Thursday. The laptops are password protected, and the FTC said it had no reason to think the data on the laptops, rather than the laptops themselves, was the target of theft.

Those affected include defendants in current and past FTC cases. The agency was sending letters to them with information about how to limit their risk of identity theft and offering a year of free credit monitoring.

It's only the latest case in which sensitive information has been lost on government computers. In May, the U.S. Department of Veterans Affairs said personal data for 26.5 million veterans may have been compromised after a break-in at an analyst's home.

The analyst had violated a department security policy by taking home the sensitive data. The incident prompted calls for all government agencies to adhere more closely to the Federal Information Security Management Act.

 

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.