<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Don&#8217;t worry - data thieves are ignorant</title>
	<atom:link href="http://michaelgracie.com/2006/05/24/dont-worry-data-thieves-are-ignorant/feed/" rel="self" type="application/rss+xml" />
	<link>http://michaelgracie.com/2006/05/24/dont-worry-data-thieves-are-ignorant/</link>
	<description>Clever Tagline Unavailable At Publication Time</description>
	<pubDate>Sat, 22 Nov 2008 12:12:35 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
		<item>
		<title>By: Michael Gracie</title>
		<link>http://michaelgracie.com/2006/05/24/dont-worry-data-thieves-are-ignorant/#comment-191</link>
		<dc:creator>Michael Gracie</dc:creator>
		<pubDate>Thu, 25 May 2006 16:05:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.michaelgracie.com/dont-worry-data-thieves-are-ignorant/#comment-191</guid>
		<description>&lt;p&gt;Mike,&lt;/p&gt;
&lt;p&gt;I feel your pain.  Knowing recipients of benefits from the VA, your comment made me wonder how much they are at risk; my concern continues to grow.&lt;/p&gt;
&lt;p&gt;On the HIPAA notion (you got it right the first time), I have found that, like most bureaucracies revolving around personally identifiable information, the information is only accessible if you ARE NOT the subject of the data.  Just one more knife in the back of the everyday citizen.&lt;/p&gt;
&lt;p&gt;Note: HIPAA stands for Health Insurance Portability and Accountability Act, and was intended as a privacy measure.  I have heard several stories of folks getting denied for health insurance, and then been refused the data which resulted in the denial.  All the more reason to pay for full coverage, and not seek medical help unless you have a compound fracture.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>Mike,</p>
<p>I feel your pain.  Knowing recipients of benefits from the VA, your comment made me wonder how much they are at risk; my concern continues to grow.</p>
<p>On the HIPAA notion (you got it right the first time), I have found that, like most bureaucracies revolving around personally identifiable information, the information is only accessible if you ARE NOT the subject of the data.  Just one more knife in the back of the everyday citizen.</p>
<p>Note: HIPAA stands for Health Insurance Portability and Accountability Act, and was intended as a privacy measure.  I have heard several stories of folks getting denied for health insurance, and then been refused the data which resulted in the denial.  All the more reason to pay for full coverage, and not seek medical help unless you have a compound fracture.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mike baechle</title>
		<link>http://michaelgracie.com/2006/05/24/dont-worry-data-thieves-are-ignorant/#comment-190</link>
		<dc:creator>mike baechle</dc:creator>
		<pubDate>Thu, 25 May 2006 05:15:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.michaelgracie.com/dont-worry-data-thieves-are-ignorant/#comment-190</guid>
		<description>I made the mistake of reading the news. 

It seems that an "analyst" at the Veterans Admin took home files (on disc) of 2.6 million  veterans.  This nitwit lives in a neighborhood where multiple burglaries have occurred in the recent past!!!! And lo and behold, some thief has now taken th data the VA analyst stole.

I am perhaps unduly ignorant of modern storage media, but as a veteran I have a good idea of the size of my VA file, and I cannot see how files of 26.5 veterans could have been stored "on a laptop".  I think the VA employee who took that data home must have amassed it carefully over a long period on data disks. 

I  am unable to see what job the analyst could have that would require the taking of that number of files. I have to assume the VA employee was mining and selling data.

Now personal data on 26.5 million veterans, not to mention spouses of those veterans,including names , addresses,and social security numbers, medical data, and personal information--including credit card data if the veteran pays drug copayments by credit card are  in the hands of persons unknown.
 
And guess what else?  The Secretary of the VA waited two weeks to tell the FBI.  His explanation is that he wanted to have time for the VA to set up a website to allow Veterans to "express their concerns". 

The VA assures us that the thieves "probably don't know what they have". Well, the VA analyst is also a theif and the analyst certainly knew what he or she had stolen. 

Notwithstanding, the Secretary does pronounce himself "incensed" at the analystfor "violating security" WHAT SECURITY?. 

A spokesperson at the VA has announced that the VA has "reached out" to the credit bureaus to advise of the possibility of credit fraud. Isn't that nice? "Reaching out" has such a genteel ring to it. As if the credit bureaus frankly give a damn, my dears....and as if they are going to drop everything and jump into 26.5 million credit records, particularly when the VA probably hasn't even identified the people whose data was stolen.
 
George Bush pronounces his "full confidence" in the Secretary of the VA. This is the same President who has the NSA trolling through phone calls and internet records of US citizens to "fight terrorism", and now the data is out there to allow the bad guys to create all kinds of false ID's, not to mention financial havoc for identity theft victims.
 
It needs to be noted that a few years ago the Govt passed a convoluted and draconian statute called HIPAA or HIIPA (can't recall which) which creates major hurdles before a medical records custodian can disclose medical data re patients. Now the US Gov't itself is the biggest violator of that statute.
 
Is this administration incompetent or what?  
Where in the world do we get these people?
 
The only saving grace is that this will open up the possibility of a major class action suit against the US Govt.</description>
		<content:encoded><![CDATA[<p>I made the mistake of reading the news. </p>
<p>It seems that an &#8220;analyst&#8221; at the Veterans Admin took home files (on disc) of 2.6 million  veterans.  This nitwit lives in a neighborhood where multiple burglaries have occurred in the recent past!!!! And lo and behold, some thief has now taken th data the VA analyst stole.</p>
<p>I am perhaps unduly ignorant of modern storage media, but as a veteran I have a good idea of the size of my VA file, and I cannot see how files of 26.5 veterans could have been stored &#8220;on a laptop&#8221;.  I think the VA employee who took that data home must have amassed it carefully over a long period on data disks. </p>
<p>I  am unable to see what job the analyst could have that would require the taking of that number of files. I have to assume the VA employee was mining and selling data.</p>
<p>Now personal data on 26.5 million veterans, not to mention spouses of those veterans,including names , addresses,and social security numbers, medical data, and personal information&#8211;including credit card data if the veteran pays drug copayments by credit card are  in the hands of persons unknown.</p>
<p>And guess what else?  The Secretary of the VA waited two weeks to tell the FBI.  His explanation is that he wanted to have time for the VA to set up a website to allow Veterans to &#8220;express their concerns&#8221;. </p>
<p>The VA assures us that the thieves &#8220;probably don&#8217;t know what they have&#8221;. Well, the VA analyst is also a theif and the analyst certainly knew what he or she had stolen. </p>
<p>Notwithstanding, the Secretary does pronounce himself &#8220;incensed&#8221; at the analystfor &#8220;violating security&#8221; WHAT SECURITY?. </p>
<p>A spokesperson at the VA has announced that the VA has &#8220;reached out&#8221; to the credit bureaus to advise of the possibility of credit fraud. Isn&#8217;t that nice? &#8220;Reaching out&#8221; has such a genteel ring to it. As if the credit bureaus frankly give a damn, my dears&#8230;.and as if they are going to drop everything and jump into 26.5 million credit records, particularly when the VA probably hasn&#8217;t even identified the people whose data was stolen.</p>
<p>George Bush pronounces his &#8220;full confidence&#8221; in the Secretary of the VA. This is the same President who has the NSA trolling through phone calls and internet records of US citizens to &#8220;fight terrorism&#8221;, and now the data is out there to allow the bad guys to create all kinds of false ID&#8217;s, not to mention financial havoc for identity theft victims.</p>
<p>It needs to be noted that a few years ago the Govt passed a convoluted and draconian statute called HIPAA or HIIPA (can&#8217;t recall which) which creates major hurdles before a medical records custodian can disclose medical data re patients. Now the US Gov&#8217;t itself is the biggest violator of that statute.</p>
<p>Is this administration incompetent or what?<br />
Where in the world do we get these people?</p>
<p>The only saving grace is that this will open up the possibility of a major class action suit against the US Govt.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
