<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>[Dataloss] Addt'l info on Ohio U 4+5</TITLE>
</HEAD>
<BODY>
<DIV id=idOWAReplyText43677 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>Is it just me, or do
disclaimers like, "there is no evidence that any of the information has been
misused" provide little comfort? Other than PR spin, do they serve some
underlying legal purpose?</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>-Dennis Opacki, CISSP QDSP</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2> Covestic, Inc.</FONT></DIV></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT><BR>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> dataloss-bounces@attrition.org on behalf
of Chris Walsh<BR><B>Sent:</B> Mon 6/12/2006 11:09 PM<BR><B>To:</B>
dataloss@attrition.org<BR><B>Subject:</B> [Dataloss] Addt'l info on Ohio U
4+5<BR></FONT><BR></DIV>
<DIV>
<P><FONT size=2>"<BR>A breach was discovered on a computer that housed IRS 1099
forms for 2,480 vendors and independent contractors for calendar years 2004 and
2005. There is no evidence that any of the information has been
misused.<BR><BR>Event 5: A breach was discovered on a computer that hosted a
variety of Web-based forms, including some that processed on-line business
transactions. Although this computer was not set up to store personal
information, investigators did discover files that contained fragments of
personal information, including Social Security numbers. The data is fragmentary
and it is not certain if the compromised information can be traced to
individuals. Also found on the computer were 12 credit card numbers that were
used for event registration. There is no evidence that nay of the information
has been misued.<BR>"<BR><BR>Via <A
href="http://www.ohio.edu/datasecurity/">http://www.ohio.edu/datasecurity/</A><BR><BR>Typos
in the
orginal.<BR><BR>_______________________________________________<BR>Dataloss
Mailing List (dataloss@attrition.org)<BR><A
href="http://attrition.org/errata/dataloss/">http://attrition.org/errata/dataloss/</A><BR><BR></FONT></P></DIV>
</BODY>
</HTML>