[Dataloss] Union Pacific - Data-loss disclosure falls short

[lyger]

http://www.sfgate.com/cgi-bin/article.cgi?file=/chronicle/archive/2006/06/16/BUG77JER911.DTL

David Lazarus
Friday, June 16, 2006

Another day, another data leak. Today I bring news of railroad operator 
Union Pacific, which can make trains run on time throughout California but 
apparently can't keep track of confidential info affecting its own 
employees and retirees.

The company recently sent letters to workers acknowledging that an 
"employee's personal computer" was stolen on April 29. It said the 
computer contained data for "many" current and former Union Pacific 
employees, including names, birth dates and Social Security numbers.

No other details were provided.

Before we delve deeper into this latest case of missing info, it's worth 
noting (yet again) how unacceptable it is that companies believe they can 
get away with providing the barest minimum of disclosure when employees or 
customers are exposed to a potentially devastating risk of fraud and 
identity theft.

[...]