[Dataloss] CT SSN's posted on the internet

[Henry Brown]

http://www.hartfordbusiness.com/news5756.html

SSNs Posted On State Web Sites
State auditors found DAS violated state law in not protecting personal 
information
By Diane Weaver Dunne
Hartford Business Journal Staff Writer
06/16/08

For more than three years, the state Department of Administrative 
Services posted the Social Security numbers of individual contractors on 
a state Web site in violation of state law, exposing the state to 
lawsuits and monetary loss, according to a recently released state audit.

The audit also uncovered that the Social Security numbers of prospective 
nursing employees were accessible on an agency Web site for 19 months 
until a complaint was lodged.

State Auditor Robert G. Jaekle said that when personal information, such 
as Social Security numbers, falls into the wrong hands, it exposes 
people to the risk of identity theft.

“Social Security numbers — personal identifying information — was not 
appropriately protected,” said Jaekle, adding that the individuals 
affected were notified by the agency and access to the information had 
been removed from the Web.

[...]