{"id":429,"date":"2006-04-15T08:29:38","date_gmt":"2006-04-15T16:29:38","guid":{"rendered":"\/?p=429"},"modified":"2006-04-15T08:29:38","modified_gmt":"2006-04-15T16:29:38","slug":"find-your-secrets-on-the-web","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=429","title":{"rendered":"FIND YOUR SECRETS ON THE WEB"},"content":{"rendered":"

Check out this amazing piece<\/a> at Computerworld<\/a>.  It boggles the mind.  To whet your appetite:<\/p>\n

APRIL 12, 2006<\/em><\/p>\n

Broward County, Fla., Maricopa County, Ariz., Fort Bend County, Texas. Three counties separated by hundreds of miles with something in common: They\u00e2\u20ac\u2122re among potentially hundreds of counties in several states that in recent years have made Social Security numbers, driver's license information, bank account numbers and a variety of other personally sensitive data belonging to residents available to anyone in the world with Internet access.<\/p>\n

The exposure follows the failure to redact sensitive information from land records and other public documents posted on the Internet and makes county Web sites a veritable treasure trove of information for identity thieves and other criminals, according to a number of privacy advocates.<\/p>\n

\u00e2\u20ac\u0153These sites are just spoon-feeding criminals the information they need,\u00e2\u20ac\u009d said B.J. Ostergren, a privacy advocate based in Richmond, Va. \u00e2\u20ac\u0153But no one appears to be seeing it and nobody\u00e2\u20ac\u2122s changing the laws,\u00e2\u20ac\u009d she said.<\/p>\n

Among the pieces of personally identifiable information from county Web sites made available to Computerworld by Ostergren and other privacy advocates were: Rep. Tom Delay\u00e2\u20ac\u2122s Social Security number on a tax lien document; the Social Security numbers for Florida Gov. Jeb Bush and his wife on a quit claim deed from 1999; driver\u00e2\u20ac\u2122s license numbers, addresses, vehicle registration information, height and race of individuals arrested for traffic violations; names and dates of birth of minors from final divorce decrees and family court documents; and even complete copies of death certificates with Social Security numbers, dates of birth and cause of death. (The Social Security numbers for Bush and his wife have been redacted and are no longer available online.)<\/p>\n

\u00e2\u20ac\u0153All of this information is available to anyone sitting in a cafe in Nigeria or anywhere else in the world,\u00e2\u20ac\u009d said David Bloys, a retired private investigator who publishes a newsletter called “News for Public Officials” in Shallowater, Texas. \u00e2\u20ac\u0153It\u00e2\u20ac\u2122s a real security threat.\u00e2\u20ac\u009d<\/p><\/blockquote>\n

The article includes a calming quote from Darity Wesley, CEO of Privacy Solutions, a privacy consultancy for the real estate industry based in San Diego.<\/p>\n

\u00e2\u20ac\u0153There\u00e2\u20ac\u2122s a real need to keep the information flowing,\u00e2\u20ac\u009d Wesley said, adding that while there\u00e2\u20ac\u2122s a real need to protect data \u00e2\u20ac\u0153at all costs,\u00e2\u20ac\u009d there\u00e2\u20ac\u2122s little evidence so far that the public availability of personal information on government sites has contributed to identity theft. For most identity thieves, the effort involved in sifting through millions of public records for sensitive information is simply not worth it, she said.<\/p>\n

\u00e2\u20ac\u0153There\u00e2\u20ac\u2122s a lot of value in public records, and shutting down access to them\u00e2\u20ac\u009d over privacy concerns would be a step backward, she said. \u00e2\u20ac\u0153Rather than wrap a lot of fear and sensationalism\u00e2\u20ac\u009d around the issue, what is needed is an informed discussion of the issue by legislators and privacy advocates.<\/p><\/blockquote>\n

This is a good example of how simply transfering a manual process to the virtual world can result in a whole new level of invasiveness and threat.<\/p>\n

\u00e2\u20ac\u0153I understand people\u00e2\u20ac\u2122s concerns, but a lot of this information has been freely available for public inspection since Plymouth Rock,\u00e2\u20ac\u009d said Carol Fogelsong, the assistant comptroller for Orange County, Fla.<\/p>\n

Even so, privacy advocates say the move to post public records on the Web without removing personally identifiable information has greatly broadened access to sensitive data and the potential for misuse. \u00e2\u20ac\u0153The simple truth is these records were safe in the courthouse for 160 years,\u00e2\u20ac\u009d Bloys said. Now, all it takes is Internet access and a very rudimentary idea of how to look for data to find all sorts of information, he said.<\/p>\n

Ostergren, for instance, claims to have harvested more than 17,000 Social Security numbers simply by \u00e2\u20ac\u0153messing around\u00e2\u20ac\u009d in county Web sites over the past two years. Among the countless nuggets Bloys turned up was the complete medical history of a terminally ill county official.<\/p><\/blockquote>\n

Finally, if you worry that this type of attack seems like too much work for an identity thief, console yourself:<\/p>\n

It is not always necessary to search for data, since online records often can be purchased in bulk for a fraction of what it would cost to buy them from a courthouse, Bloys said. One example: Fort Bend County, Texas, last year sold to a Florida company every document ever filed with the county clerk\u00e2\u20ac\u2122s office — estimated to be around 20 million — for roughly $2,500. Bloys wrote about the transaction in his newsletter in December. Fort Bend County officials did not immediately return a call seeking comment.<\/p>\n

 <\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

We need a legal framework that can put an end to the kind of foolishness described in this Computerworld article.<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/429"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=429"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/429\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}