PDA

View Full Version : Veterans data stolen


Gypsy
05-22-2006, 19:02
http://news.yahoo.com/s/ap/20060522/ap_on_go_ca_st_pe/veterans_disk

Thieves Steal Personal Data of 26.5M Vets By HOPE YEN, Associated Press Writer
1 hour, 18 minutes ago



WASHINGTON - Thieves took sensitive personal information on 26.5 million U.S. veterans, including Social Security numbers and birth dates, after a Veterans Affairs employee improperly brought the material home, the government said Monday.


The information involved mainly those veterans who served and have been discharged since 1975, said VA Secretary Jim Nicholson. Data of veterans discharged before 1975 who submitted claims to the agency may have been included.

Nicholson said there was no evidence the thieves had used the data for identity theft, and an investigation was continuing.

"It's highly probable that they do not know what they have," he said in a briefing with reporters. "We have decided that we must exercise an abundance of caution and make sure our veterans are aware of this incident."

Veterans advocates expressed alarm.

"This was a very serious breach of security for American veterans and their families," said Bob Wallace, executive director of Veterans of Foreign Wars. "We want the VA to show leadership, management and accountability for this breach."

Ramona Joyce, spokeswoman for the American Legion, agreed that the theft was a concern. "In the information age, we're constantly told to protect our information. We would ask no less of the VA," she said.

Nicholson declined to comment on the specifics of the incident, which involved a midlevel data analyst who had taken the information home to suburban Maryland on a laptop to work on a department project.

The residential community had been a target of a series of burglaries when the employee was victimized earlier this month, according to the FBI in Baltimore. Local law enforcement and the VA inspector general were also investigating.

"I want to emphasize there was no medical records of any veteran and no financial information of any veteran that's been compromised," Nicholson said, although he added later that some information on the veterans' disabilities may have been taken.

Nicholson said he does not know how many of the department's 235,000 employees go thorough background investigations. He said employees who have access to large volumes of personal data should be required to undergo such checks, but he does not believe the VA employee was involved in the theft.

"We do not suspect at all any ulterior motive," he said.

The department has come under criticism for shoddy accounting practices and for falling short on the needs of veterans.

Last year, more than 260,000 veterans could not sign up for services because of cost-cutting. Audits also have shown the agency used misleading accounting methods and lacked documentation to prove its claimed savings.

"It is a mystifying and gravely serious concern that a VA data analyst would be permitted to just walk out the VA door with such information," Illinois Rep. Lane Evans (news, bio, voting record), the top Democrat on the Veterans Affairs Committee, said in a statement signed by other Democrats on the panel.

Sen. John Kerry, D-Mass., who is a Vietnam veteran, said he would introduce legislation to require the VA to provide credit reports to the veterans affected by the theft.

"This is no way to treat those who have worn the uniform of our country," Kerry said. "Someone needs to be fired."

The VA said it was notifying members of Congress and the individual veterans about the burglary. It has set up a call center at 1-800-FED-INFO and Web site, http://www.firstgov.gov, for veterans who believe their information has been misused.

It also is stepping up its review of procedures on the use of personal data for many of its employees who telecommute as well as others who must sign disclosure forms showing they are aware of federal privacy laws and the consequences if they're violated.

Deborah Platt Majoras, chair of the Federal Trade Commission, said her task force has reached out to the three major credit bureaus to be alert to possible misuse.

___

On the Net:

Information for veterans suspecting identity theft:

http://www.firstgov.gov or 1-800-FED-INFO

Hangfire
05-22-2006, 19:27
Great Information thanks.

Gypsy
05-25-2006, 19:38
http://news.yahoo.com/s/ap/20060525/ap_on_go_ca_st_pe/vets_id_theft

VA breach discovered through office gossip By HOPE YEN, Associated Press Writer



WASHINGTON - The theft of personal data for 26.5 million veterans came to the attention of the Veterans Affairs inspector general only through office gossip, he told Congress Thursday.


In four hours of testimony, IG George Opfer said the department failed to heed years of warnings about lax security and noted that the employee who lost the data when his house was burglarized had been improperly taking the material home for three years.

"We were on borrowed time," Opfer told Senate and House panels investigating the breach.

Earlier, VA Secretary Jim Nicholson said he was "mad as hell" that he wasn't told about the burglary until May 16 — nearly two weeks after it happened. He then told the FBI on May 17, leading to a public announcement May 22.

Nicholson acknowledged that officials including Deputy Secretary of Veterans Affairs Gordon Mansfield knew about the incident earlier, but would not say whether Mansfield should be punished, citing a need for a full investigation.

"As a veteran, I am outraged. Frankly I'm mad as hell," Nicholson said, pledging strong action against those responsible. "I can't explain the lapses of judgment on the behalf of my people. We will stay focused on these problems until we get them fixed."

Lawmakers were unforgiving.

"I don't feel any of the personal pain or outrage of your action," said Sen. Susan Collins (news, bio, voting record), R-Maine, who chairs the Homeland Security Committee. "This was a monumental breach. It was inconceivable that it involved such long delays."

At the House hearing, Rep. Bob Filner (news, bio, voting record), D-Calif., called Nicholson's response unacceptable.

"In the last five years, a host of agencies have reported that the VA has had many problems with information security," he said. "How did the VA react? With indifference."

"You're not taking responsibility for this mismanagement debacle," he said. "The most dramatic thing to take responsibility is to resign."

White House press secretary Tony Snow said Thursday that wasn't going to happen.

"He'll have his opportunity to testify on Capitol Hill today," Snow said of Nicholson. "I'm sure they will have sharp questions for him. But he's not tendering his resignation."

During the hearing, Opfer pointed to the following missteps:

_The data analyst routinely took home disks containing Social Security numbers, birth dates and disability information, without telling supervisors.

_After the May 3 burglary, the data analyst informed supervisors. But the IG's office was never told, delaying an investigation until May 10, when one of its employees informally heard about a burglary — and that VA electronic records may have been stolen — while attending a routine meeting.

Mansfield, the VA's deputy secretary, was informed of the burglary on May 10. He then asked VA chief of staff Tom Bowman to look into the scope of the potential breach but did not tell the IG, according to a government official who insisted on anonymity because he was not authorized to speak on the matter.

_In every year since 2001, the IG had pointed to the VA's information security as a "material weakness" that created a substantial risk, with little result from VA officials already grappling with budget shortfall and other accounting woes.

During the hearing Thursday, Rep. Steve Buyer (news, bio, voting record), R-Ind., chairman of the House veterans panel, pressed Nicholson to give the nation's veterans assurances that their information will not be used for identity theft, or that they would be "made whole" if the information is misused.

Nicholson said he could not, saying that the VA would have to get more funding to compensate veterans. Nicholson has previously downplayed the potential danger, explaining that the May 3 theft appeared to be a random burglary.

"Before I can give you that assurance, I have to work with Congress ... if they suffer a loss," Nicholson said, who added that it would take about $25 million alone to improve security procedures at his agency. "It will give peace of mind to veterans if they suffer a loss to have a system to compensate."

Meanwhile, the Montgomery County, Md., police department said Thursday it was offering a $50,000 reward for information leading to the return of the stolen data in Aspen Hill, which was stored on a laptop computer and external hard drive.

The VA employee is on administrative leave while local and federal law enforcement continue their investigation.

___

x SF med
05-26-2006, 08:37
Hey RL - want to set up a Class Action suit for us? Not that I think it will do any good, but hey why not every other group in the US is litigious, we should be too (sarcasm intended, this is just a joke, kinda like the VA infsec, persec):mad: :mad: :mad:

SRGross
05-26-2006, 16:51
I work at the local VA, because of this we have to take a cyber security class, not that we have enough alreadt, I would strongly suggest you notify you credit card company and other credit companies of you data being open, some are offering a credit protection for 1 year, but after that year I guess you are basically screwed!

Gypsy
05-31-2006, 11:47
http://news.yahoo.com/s/ap/20060531/ap_on_go_ca_st_pe/vets_id_theft_4;_ylt=Ai6ALeO2qv1s6VAnE6Uz4vlsbEwB; _ylu=X3oDMTBiMW04NW9mBHNlYwMlJVRPUCUl

Stolen VA data goes beyond initial reports By HOPE YEN, Associated Press Writer
1 hour, 25 minutes ago


WASHINGTON - Personal information on 26.5 million veterans that was stolen from a Veterans Affairs employee this month not only included Social Security numbers and birthdates but in many cases phone numbers and addresses, internal documents show.

The three pages of memos by the VA, written by privacy officer Mark Whitney and distributed to high-level officials shortly after the May 3 burglary, offer new details on the scope of one of the nation's largest security breaches. The memos were obtained Wednesday by The Associated Press.

They show that a file containing 6,744 records pertaining to "mustard gas veterans" — or those who participated in chemical testing programs during World War II — was breached, and that a "short file" with as many as 10 diagnostic codes indicating a veteran's disability also was stolen.

At the same time, however, the memos suggest that the data might be difficult to retrieve by thieves.

"Given the file format used to store the data, the data may not be easily accessible," stated one memo dated May 5 and distributed internally May 8.

A spokesman for the VA did not have immediate comment Wednesday.

Some lawmakers said Wednesday they were troubled by the new revelations, which go further than what the VA initially reported after publicizing the theft on May 22. At the time, VA Secretary Jim Nicholson said the data was limited to Social Security numbers and birthdates; he later indicated that diagnostic codes in some cases also may have been breached.

WannabeSF
06-03-2006, 10:18
... some are offering a credit protection for 1 year, but after that year I guess you are basically screwed!
IIRC, a 'credit watch' (I think that's what it's called) is only good for one year & then has to be renewed. At least that's what I remember being told after contacting Equifax & Transunion about ID theft concerns.

SRGross
08-07-2006, 08:37
July 18 Data Security Issue Update

VA to Conduct Data Breach Analysis; Individual Credit Monitoring No Longer Necessary



Given the FBI's high degree of confidence that the information recently recovered was not accessed or compromised, VA believes that individual credit monitoring will no longer be necessary.



Still, protecting veterans' private information remains a priority for VA. Out of an abundance of caution, and to further safeguard individuals' information, VA will work swiftly to solicit bids from companies that provide data breach analysis. Data breach analysis looks across multiple industries to detect patterns of misuse related to a specific data loss. While it is considered highly unlikely by the FBI and law enforcement that this data was accessed, data breach analysis will provide additional assurances. VA has funds in its budget that can be used for this purpose, and there will be no reduction in the quality of health care and other services provided to veterans as a result of this expenditure.



The Secretary remains unwavering in his resolve to make VA the leader in protecting personal information, training and educating our employees in best practices, and establishing a culture that always puts the safekeeping of veterans’ personal information first.

also here is the link to the Dept of Veterans' Affairs, you can apply online now.
http://www.va.gov/