[Dataloss] Wis. mailing sent with personal info

[Adam Shostack]

Appalled experts elsewhere are asking why Wisconsin gave SSNs to EDS
as part of mailing informational brochures.

You don't have to select * from row.  You could have selected name,
address from row.

Aam


On Thu, Jan 10, 2008 at 01:46:57PM -0600, Henry Brown wrote:
| interesting followup:
| 
|  From ComputerWorld
| http://tinyurl.com/2j6v9x
| 
| "Appalled" officials at the Wisconsin State Department of Health and 
| Family Services (DHFS) are asking Electronic Data Systems Corp. to 
| explain why it allowed Social Security numbers to be printed on the 
| address labels of information brochures recently sent to more than 
| 260,000 recipients of state health care services.
| 
| The state agency is also asking Plano, Texas-based EDS to cover the cost 
| of mailing letters to all of the affected individuals informing them of 
| the error as well as the costs of providing credit-monitoring services 
| for a year.
| 
| [...]
| 
| 
| > http://www.businessweek.com/ap/financialnews/D8U201M02.htm
| >
| > Social Security numbers were printed on about 260,000 informational 
| > brochures sent by a vendor hired by the state to recipients of SeniorCare 
| > and other state programs.
| >
| > The gaffe is the second time in 13 months that mailings including the 
| > recipients' Social Security numbers were sent from state departments. In 
| > December 2006, the state Department of Revenue mailed 171,000 tax booklets 
| > with the number printed on the label.
| >
| > The latest mailing was first reported on Tuesday by WKOW-TV.
| >
| > The state Department of Health and Family Services issued a statement 
| > saying the mistake was the fault of EDS, a private vendor for state 
| > Medicaid services. Karen Timberlake, deputy secretary of the state 
| > department, said the mailing went to about 260,000 Medicaid, SeniorCare, 
| > and BadgerCare members.
| >
| > [...]
| > _______________________________________________
| > Dataloss Mailing List (dataloss at attrition.org)
| > http://attrition.org/dataloss
| >
| > Tenable Network Security offers data leakage and compliance monitoring
| > solutions for large and small networks. Scan your network and monitor your
| > traffic to find the data needing protection before it leaks out!
| > http://www.tenablesecurity.com/products/compliance.shtml
| >
| >
| >
| >   
| 
| _______________________________________________
| Dataloss Mailing List (dataloss at attrition.org)
| http://attrition.org/dataloss
| 
| Tenable Network Security offers data leakage and compliance monitoring
| solutions for large and small networks. Scan your network and monitor your
| traffic to find the data needing protection before it leaks out!
| http://www.tenablesecurity.com/products/compliance.shtml