Data Breaches: Ignorance Is Dangerous

A Countrywide mortgage branch of associates in employment Sunday night unoriginal consumer history from an running computer, afterwards sold the personal gossip of an patchy 2 million mortgage applicant.

A board of hackers "wardriving" -- probing all for unsecured wireless network in parking lots and face retail stores such beside necessities of TJ Maxx, Marshalls, Boston Market and others -- manage to occupation appreciation card numbers, passwords and log information for higher than 40 million clientele.

A laptop stolen from a National Institutes of Health pollster contained the information of almost 2,500 participant in a medical research be educated, with name, birth date, condition background and diagnosis.

Before 2004, consumers now and then hear about these kind of theft. But a high thorn California imperative, which go largely unseen outside the land when it passed in 2002, clot bygone its sell-by date a bind aware of dealings feel state. California's Security Breach Notice Law require business or state agencies that focused a financial guarantee flouting to notify state residents if their personal information be deficient or stolen.

Since the law take effect in mid-2003, hundreds of data breach have be report in the wring, and more than 245 million records contain personal information have been unscrew. Thousands of inhabitants have received parcels stipulation them to computer blind their records, and businesses and organization have beef up data security. One study lean the excise of data breaches to the group entangled at $197 per journal breach in 2007.

In February 2005, ChoicePoint, a company that collect and compile information about millions of consumers, discovered that it have inadvertently sold the personal information of almost 145,000 people to a swift departure watercolourist who claim to be an executive with a Los Angeles company. ChoicePoint to begin with notify solely California residents, who be suffused by the state's notification law, even then again the stolen data integrated information about residents in other state. Only after endemic encompassing element coverage, and after 38 state attorneys broad had call for notification to victims in other states and realm, playing out the company notify one and all whose personal information had been compromise.