[ISN] Good news on ID theft

[InfoSec News]

Forwarded from: Adam Shostack <adam at homeport.org>

Oh, come on.  It's not the size of the breach, it's what data was
taken.  Or perhaps it's the size of the data set: "A computerized
analysis of four data breaches..."


On Fri, Dec 09, 2005 at 12:37:13AM -0600, InfoSec News wrote:
| http://www.signonsandiego.com/news/business/20051208-9999-1b8identity.html
| 
| By Bruce V. Bigelow
| UNION-TRIBUNE STAFF WRITER
| December 8, 2005 
| 
| A computerized analysis of four data breaches that compromised
| personal information on some 500,000 people suggests the alarm that
| often accompanies electronic break-ins may be largely unwarranted.
| 
| On the other hand, the study also suggests that publicity can help
| deter fraudsters from using the stolen data.
| 
| The analysis, conducted over the past six months by San Diego's ID
| Analytics, is believed to be the first to calculate just how much
| fraud occurred after each security breach.