Identity Theft
This article on CNN this morning really brought home an issue that has bugged me for a very long time. And that’s the security of personal information by large corporations. We are required by our banks and credit companies to give up huge amounts of information about our lives. We tell them everything from when we were born to how much we make per year. Our bank even theoretically knows what we purchase. Credit card companies keep a permanent record of our so-called ratings as well as our personal information.
But we blindly trust them. We have to. It’s not like you could live a normal life in the US without a bank account. And you probably have a credit rating whether you want one or not.
So the idea that Bank of America could just LOSE the personal information for 1.2 million accounts, let alone government accounts, is absolutely criminal in my eyes.
But the part of this that really sets off my steam is that BofA waited two months to let anyone know! They claim that the federal law enforcement authorities prevented them from revealing the “theft” for that time, but if that’s the case, then there is something seriously wrong here as well. Had the problem been revealed immediately, people might have actually done something. They might have prevented billions in identity theft by simply having their cards replaced. But instead they then go and blame the baggage handlers at the airport.
Right. How convenient. Some random bag guy just happened to figure out what was in the package that he was randomly assigned to carry, and then he just happened to know how to access the information on the “tapes” (are they REALLY still using magnetic tape??) and then just happened to be able to walk off with it without anyone noticing. Yup. Oh, and what the hell was the personal banking info for government employees, including the Pentagon, and 40 other federal agencies, doing unsecured on a flight in the first place?! Don’t they use even the most basic encryption? Why not send the data via an encrypted link? Even 1.2 million records wouldn’t take more than a minute or two, and either the encrypted links (that the banks tout as a must for any online transactions) are secure, or they’re not. If they’re good enough for us, then they should be good enough for the big boy’s, right? Careful how you answer that.
So BofA, quit blaming someone else for your lapse in security. YOU and YOU alone are responsible for the information that we are required to put in your care, and the very fact that this happened at all is indication that YOU failed somewhere. Who did it is almost irrelevant. It’s more important that you NOT LET IT HAPPEN EVER AGAIN.
Oh, and you should immediately fire your CSO, as he is obviously incompetent.
Grrr… And yes, BofA “just happens” to be my bank… For now. I wonder how many times they have “lost” my personal information? After all, I’m just an average citizen and not a pentagon official.
Bitheads.[url=]