[attrition] Why we do this

[lyger]

http://attrition.org/dataloss/why.html

Tue Feb 20 21:01:22 EDT 2007


"Will you remove an entry from the Data Loss web page or DLDOS?"

On a few occasions, Attrition has been asked if we will remove a data loss 
entry. In many cases, a company's representative feels that since the incident 
wasn't conclusively proven to have had personal data compromised, it's 
imperitive that the listing of the company come down as well.

While this is certainly understandable, Attrition will not remove entries of 
companies with potential data loss incidents. There are several reasons for 
this -- primarily, Attrition's web page and database are services to the 
security community, just as a news outlet is. We report on data loss incidents, 
either confirmed or in question. As part of our reporting, we gather statistics 
and serve as a record.

Attrition's statistics, for instance, are a very valuable part of the service 
we provide. Our staff are often questioned on the subject of data loss 
incidents and current trends in the subject matter, and we have been even been 
asked by the United States government to assist with research regarding said 
incidents.

[...]