[Dataloss] UVa laptop stolen, had sensitive data

[Mike Simon]

Typically, even a FOIA request can be refused while police are investigating
the crime. Something to do with not alerting the criminals to exactly what
the police know and what actions they are taking.

On Wed, Apr 16, 2008 at 8:16 AM, Chris Walsh <chris at cwalsh.org> wrote:

> Time for somebody to FOIA the Virginia AG's office.
>
> Breaches must be centrally-reported to the AG there.
>
> cw
>
> On Wed, Apr 16, 2008 at 07:49:57AM +0000, security curmudgeon wrote:
> >
> >
> > ---------- Forwarded message ----------
> >
> > A laptop stolen from a University of Virginia employee contained
> sensitive
> > information about more than 7,000 students, staff and faculty members.
> >
> > Stolen from an unidentified employee from an undisclosed location in
> > Albemarle County, the laptop contained a confidential file filled with
> > names and Social Security numbers.
> >
> > "As soon as we learned about the theft, we starting moving as quickly as
> > we could," UVa spokeswoman Carol Wood said.
> >
> > UVa mailed out letters Monday to each person affected by the data
> breach.
> > The university will publicly announce the incident today. The Albemarle
> > County Police Department is investigating the theft. At the police
> > department's request, UVa is releasing few details about the incident.
> >
> > Wood declined to say when the burglary occurred or which academic
> > departments were affected. She did say, however, that the theft did not
> > occur on UVa's campus.
> >
> _______________________________________________
> Dataloss Mailing List (dataloss at attrition.org)
> http://attrition.org/dataloss
>
> Tenable Network Security offers data leakage and compliance monitoring
> solutions for large and small networks. Scan your network and monitor your
> traffic to find the data needing protection before it leaks out!
> http://www.tenablesecurity.com/products/compliance.shtml
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://attrition.org/pipermail/dataloss/attachments/20080416/30a7506d/attachment.html