Erik Mesoy
Core Tester / Intern
Classically, "The third time, it's enemy action." (Some versions read hostile intent.)
1999: SEC database exposes Social Security numbers
2005: DOJ posts social security numbers on web site
2007, April: U.S. Database Exposes Social Security Numbers
It's not as though the government is ever going to go out of business through incompetence, is it?
So what's the incentive to not make such "mistakes", if we're still going to call them mistakes after the third time?
1999: SEC database exposes Social Security numbers
(IDG) -- Some top corporate executives' Social Security numbers are freely available on a government Web site -- another example of the continuing battle over privacy rights in the Internet age.
Although it has stopped requesting Social Security numbers on certain documents for privacy reasons, the Securities and Exchange Commission (SEC) nevertheless refuses to remove the numbers, including that of Microsoft Corp. Chairman and CEO Bill Gates, from old documents on its Web site.
Although the SEC posted the numbers in the first place, a spokesman argued that the agency doesn't have the authority to remove them. Meanwhile, information pointing to the location of the identifiers is circulating on the Internet, underscoring one of the biggest risks of online data.
2005: DOJ posts social security numbers on web site
Information Week has published an article on social security numbers that were discovered available to the public on a Department of Justice web site. Working from a tip, names and SSNs of several people involved in DOJ investigations were found to be accessible with a minimum of effort. When contacted, the DOJ blocked at least one of the offending files, although later Google and Yahoo searches were still able to display the information from cached mode, as you would expect. There is also some evidence that the DOJ didnt exactly break any speed records in trying to correct the situation:
...according to an InformationWeek source, the Justice Department had been notified of the error more than a month ago. The source, a systems security manager at a California bank, said he saw the information on the site and sent an E-mail on Nov. 12 alerting the Justice Department. The security manager followed up with the Justice Department via E-mail on Dec. 4 and was notified on Dec. 6 by the site's Web master that his E-mail had been forwarded to the "responsible component within the Department." The systems security manager contacted InformationWeek on Dec. 19 when he noticed that the person's name and Social Security number still could be found on the Justice Department's Web site.
I suspect that, at least in these cases, the release of this personal info was probably due more to ineptitude than outright malice. However, the idea that this could happen at all, coupled with the fact that the DOJ didnt move on it right away, seems to point toward a systemic lack of understanding of just how egregious an error this is.
2007, April: U.S. Database Exposes Social Security Numbers
The Social Security numbers of tens of thousands of people were disclosed for years in a publicly available database.
For free access to this article and more, you must be a registered member of NYTimes.com
WASHINGTON, April 20 The Social Security numbers of tens of thousands of people who received loans or other financial assistance from two Agriculture Department programs were disclosed for years in a publicly available database, raising concerns about identity theft and other privacy violations.
Officials at the Agriculture Department and the Census Bureau, which maintains the database, were evidently unaware that the Social Security numbers were accessible in the database until they were notified last week by a farmer from Illinois, who stumbled across the database on the Internet.
It's not as though the government is ever going to go out of business through incompetence, is it?
