Homeland Security database leaks employee information

May 27, 2013

The Department of Homeland Security (DHS) said lat week it has notified employees and others with DHS clearance to be on alert for potential fraud due to a vulnerability discovered in software used by a vendor to process personally identifiable information (PII) for background investigations. The software hole in had been there since July 2009. "During the week of May 20, 2013, DHS is alerting employees of the potential vulnerability and outlining ways that they can protect themselves, including requesting fraud alerts and credit reports," the DHS said in its statement "Privacy Response to Potential PII Incident." DHS says a vulnerability in software that an unnamed vendor uses to maintain a database of background investigations had a hole in it that left open to potential unauthorized access information that includes name, Social Security number, and date of birth. DHS says the software vulnerability has now been fixed and there's no evidence that this PII released to DHS clearances has been stolen from the vendor-maintained database. (See also "Ten Best Practices to Prevent Data and Privacy Breaches.") Follow-up resources offered DHS has set up a call center to address any employee concerns related to the notifications and is advising affected individuals concerned about potential fraud to consider taking certain measures, such as letting potential creditors know to contact them before opening a new account in their name. DHS also listed the three credit reporting firms, Equifax, Experian, and TransUnion, saying an individual can place a fraud alert. To read this article in full or to leave a comment, please click here

Link: http://www.pcworld.com/article/2039752/homeland-security-database-leaks-employee-information.html#tk.rss_all