• Secure your account

    A friendly reminder to our users, please make sure your account is safe. Make sure you update your password and have an active email address to recover or change your password.

  • Xenforo Cloud has scheduled an upgrade to XenForo version 2.2.16. This will take place on or shortly after the following date and time: Jul 05, 2024 at 05:00 PM (PT) There shouldn't be any downtime, as it's just a maintenance release. More info here

Gov't Says Stolen VA Laptop Recovered

jaguarr

Be Your Own Hero
Joined
Nov 11, 2003
Messages
43,566
Reaction score
1
Points
31
http://www.sfgate.com/cgi-bin/article.cgi?f=/n/a/2006/06/29/national/w075415D98.DTL

Government Says Stolen VA Laptop Recovered [FONT=geneva,arial] - By HOPE YEN, Associated Press Writer
[/FONT] [FONT=geneva,arial][SIZE=-2] Thursday, June 29, 2006
[/SIZE][/FONT]
(06-29) 08:20 PDT WASHINGTON, (AP) --
The government has recovered the stolen laptop computer and hard drive containing sensitive data for up to 26.5 million veterans and military personnel, Veterans Affairs Secretary Jim Nicholson said Thursday.
Nicholson said law enforcement officials were still investigating to determine whether data from the equipment, which included names, birth dates and Social Security numbers, had been duplicated or utilized in any way.
So far, he said there have been no reports of identity theft stemming from the May 3 burglary at a VA employee's Maryland home.
"There is reason to be optimistic," Nicholson told a House committee at the opening of a hearing on one of the worst breaches of information security. "There is not a certainty, but we have to remain hopeful they have not been compromised."
Nicholson offered no immediate details on how the laptop was recovered. He acknowledged that the burglary "has brought to the light of day some real deficiencies in the manner we handled personal data."
"If there's a redeeming part of this, I think we can turn this around," he said.
Newly discovered documents show that the VA analyst blamed for losing the laptop had received permission to work from home with data that included millions of Social Security numbers and other personal information on veterans and military personnel.
"From the start, the VA has acted as if the theft was a PR problem that had to be managed, not fully confronted," said Rep. Bob Filner, D-Calif. "They're trying to pin it on this one guy, but I think it's other people we need to be looking at."
The documents obtained by The Associated Press show that the data analyst, whose name was being withheld, had approval as early as Sept. 5, 2002, to use special software at home that was designed to manipulate large amounts of data.
A separate agreement, dated Feb. 5, 2002, from the office of the assistant secretary for policy and planning, allowed the worker to access Social Security numbers for millions of veterans.
A third document, also issued in 2002, gave the analyst permission to take a laptop computer and accessories for work outside of the VA building.
"These data are protected under the Privacy Act," one document states. The analyst is the "lead programmer within the Policy Analysis Service and as such needs access to real Social Security numbers."
The department said last month it was in the process of firing the data analyst, who is now challenging the dismissal.
VA officials have said the firing was justified because the analyst violated department procedure by taking the data home. They also said he was "grossly negligent" in handling sensitive information.
However, Filner noted that the employee had informed supervisors of the theft immediately after the crime, while supervisors waited nearly three weeks to inform the public on May 22. Nicholson himself was informed on May 16.
"The gross negligence in this case are the people above him," said Filner, the acting top Democrat on the House Veterans' Affairs Committee.
Veterans groups and lawmakers from both parties have criticized the VA for the theft and noted years of warnings by auditors that information security was lax. Some veterans also have filed suit in federal court, seeking $1,000 in damages — or up to $26.5 billion total — for privacy violations.






Man, sounds like they were really trying to screw the lead analyst on this. Nice bosses to have. :down



jag
 
I agree but the laptop shouldnt have been stolen in the first place.
 
NHawk19 said:
I agree but the laptop shouldnt have been stolen in the first place.

But the guy had all the necessary permissions to even take the laptop and all that sensitive data off-site at all, which is really where the problem lies. He shouldn't ever have been allowed to do so, and therefore the fault lies with the higher-ups for allowing it in the first place.

jag
 
jaguarr said:
But the guy had all the necessary permissions to even take the laptop and all that sensitive data off-site at all, which is really where the problem lies. He shouldn't ever have been allowed to do so, and therefore the fault lies with the higher-ups for allowing it in the first place.

jag


Gotta agree.
 
Darthphere said:
Gotta agree.

ANY data security expert will tell you that the absolute best way to keep data secure is to not take it out of it's secure environment in the first place, which putting it on a laptop and taking it off site definitely goes against the grain of. It may have been bad judgement on the analyst's part to want to do it, but it was even WORSE judgement on his superior's part to agree to it and authorize it. They should have told him "No." and then this problem wouldn't have cropped up.

jag
 
jaguarr said:
ANY data security expert will tell you that the absolute best way to keep data secure is to not take it out of it's secure environment in the first place, which putting it on a laptop and taking it off site definitely goes against the grain of. It may have been bad judgement on the analyst's part to want to do it, but it was even WORSE judgement on his superior's part to agree to it and authorize it. They should have told him "No." and then this problem wouldn't have cropped up.

jag

yup :up: cant only blame the guy even though it was stolen from him.
 

Users who are viewing this thread

Latest posts

Forum statistics

Threads
200,669
Messages
21,784,207
Members
45,621
Latest member
ritayo
Back
Top
monitoring_string = "afb8e5d7348ab9e99f73cba908f10802"