An Audible Data Privacy Breach

 

RI labor dept. warns of possible privacy breach.

I think about data encryption, physical access controls to servers and such on a regular basis. But there are all kinds of formats via which data gets stored or communicated.  The Rhode Island Department of Labor recently had a data breach involving their call center.  Customers were able to hear conversations on other calls.  The department estimates fewer than 700 people were affected.

• Paper forms in which data is originally collected.  Think membership forms, applications, feedback and suggestion forms.  I remember seeing a binder full of membership forms being used to prop open a door on the sidewalk in front of a store.  When I pointed out to the manager that this was a problem, he shrugged and said it wasn’t a problem because all the data had already been keyed in and therefore no longer had any value to them except when the systems were down.
• Video and photographs.  The advent of video analytics and photo analysis means that we are collecting, storing, and putting at risk more data than ever before.  I remember seeing a retailer’s security video tapes sitting all lined up on a counter at the back of a store.  The only thing that made this somewhat safe is that most likely the security system was probably so poor it would be impossible to determine who was on those videos.  But now video analytics allow retailers to determine when you visit their store, who you shop with and what products interest you.
• Conversations.  Yes, all those "may be recorded for quality purposes" call center calls are most likely chock full of your personal information.  I worry how well those data sets are being protected, too.

I believe our role as data professionals should go beyond protecting the data held in a traditional database.  Because I’m not sure anyone else is even considering that data.  And I’d bet the bad guys are betting that no data professional is involved in protecting it.

Love your data.  Love your customers’ data, too.

3 Comments

• 
  ThomasLaRock 2 January 2013 at 4:08 PM

  I’m certain the number of data breaches aren’t really increasing, just the reporting of them. Kinda like shark attacks.

  Reply
  • 
    datachick 2 January 2013 at 7:08 PM

    I think they need wider reporting. It’s time that customers understand just how poorly their data is being cared for.

    Reply
• Securing SQL Server » Blog Archive » An Audible Data Privacy Breach 6 January 2013 at 2:57 PM

  […] was reposted from Clean Up BlogThisSecurity feed and make it a snipit http://www.datamodel.com/index.php/2013/01/02/an-audible-data-privacy-breach/ written by Karen Lopez. They get all the credit for this, not […]

  Reply