<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: cleveland]]></title>
    <link>http://securityratty.com/tag/cleveland</link>
    <description></description>
    <pubDate>Wed, 20 Feb 2008 21:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Notacon 9 Pre-Registration Open]]></title>
      <link>http://securityratty.com/article/d4c210ddf5fc34f2f12722b32a6d9076</link>
      <guid>http://securityratty.com/article/d4c210ddf5fc34f2f12722b32a6d9076</guid>
      <description><![CDATA[The Notacon conference is getting a huge jump on things for next year. Theyve already got their pre-regsitration open for April 2009. Well done
From the Notacon site
In order to simplify things for...]]></description>
      <content:encoded><![CDATA[<p>The <a href="http://www.notacon.org">Notacon</a> conference is getting a huge jump on things for next year. They&#8217;ve already got their pre-regsitration open for April 2009. Well done.</p>
<p>From the Notacon site:</p>
<blockquote><p>In order to simplify things for everyone, we have 2 basic registration levels, one with swag, the other with just the badge. With either registration, you can opt to pre-order a Notacon t-shirt via a drop-down option on the registration page.</p>
<p>The swag bag in the premier registration package not only will give you tons of goodies, but will also include a couple of meal vouchers that are good at the hotel to make sure you get at least some good meals over the course of the weekend. We will continue, of course, to have our con suite with complimentary sodas and snacks, but if you want something more substantial, think about the premier package!</p></blockquote>
<p>$100 for the premium package. Not bad at all. There will be 600 tickets made available for the &#8216;09 show in Cleveland.</p>
<p><a href="http://blog.notacon.org/?p=29">Article Link</a></p>

<p><a href="http://feeds.feedburner.com/~a/Liquidmatrix?a=62gT8J"><img src="http://feeds.feedburner.com/~a/Liquidmatrix?i=62gT8J" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=zvq2NI"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=zvq2NI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=lhY8Mi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=lhY8Mi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=NZhj2i"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=NZhj2i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=CYC6Vi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=CYC6Vi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=bEg6Ni"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=bEg6Ni" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/Liquidmatrix/~4/318794168" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 06:38:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/registration">registration</category>
      <category domain="http://securityratty.com/tag/premier registration package">premier registration package</category>
      <category domain="http://securityratty.com/tag/registration page">registration page</category>
      <category domain="http://securityratty.com/tag/basic registration levels">basic registration levels</category>
      <category domain="http://securityratty.com/tag/swag bag">swag bag</category>
      <category domain="http://securityratty.com/tag/swag">swag</category>
      <category domain="http://securityratty.com/tag/notacon site">notacon site</category>
      <category domain="http://securityratty.com/tag/article link">article link</category>
      <category domain="http://securityratty.com/tag/meal vouchers">meal vouchers</category>
      <source url="http://feeds.feedburner.com/~r/Liquidmatrix/~3/318794168/">Notacon 9 Pre-Registration Open</source>
    </item>
    <item>
      <title><![CDATA[UTUIA laptops are missing after shipment]]></title>
      <link>http://securityratty.com/article/3cca53a16c51f77342f6ce79b4c1eee9</link>
      <guid>http://securityratty.com/article/3cca53a16c51f77342f6ce79b4c1eee9</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
6/9/08

Organization
United Transportation Union Insurance Association (&quot;UTUIA

Contractor/Consultant/Branch
Westin Hotels and Resorts
United Parcel...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/utuia.jpg" align="right" height="81" width="140"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>6/9/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.utuia.org/index.htm">United Transportation Union Insurance Association ("UTUIA")</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.starwoodhotels.com/westin/index.html">Westin Hotels and Resorts</a> <br><a href="http://www.ups.com/content/us/en/index.jsx">United Parcel Service</a> <br><br><span style="font-weight: bold;">Victims:</span><br>Policyholders<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>"names and social security numbers"<br><br><span style="font-weight: bold;">Breach Description:</span><br>Two laptop computers shipped via UPS to UTUIA offices are missing.&nbsp; One of the laptops may contain sensitive personal information belonging to UTUIA policyholders.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://doj.nh.gov/consumer/pdf/united_trans_union.pdf">New Hampshire State Attorney General breach notification</a><br><br>Report Credit:<br>The New Hampshire State Attorney General<br><br><span style="font-weight: bold;">Response:</span><br>From the online source cited above:<br><br>We are writing to inform you of a recent security incident involving UTUIA, headquartered in Ohio.<br><br>During shipment of UTUIA laptop computers to UTUIA offices, laptops have been reported missing.<br><span style="font-style: italic;">[Evan] The notification letter sent to victims mentions two laptops.</span><br><br>The laptops may have contained personal information, including names and social security numbers, about policyholders<br><br>UTUIA has reported the missing laptops to law enforcement authorities and is pursuing the return of these laptops.<br><br>United Transportation Union Insurance Association has filed police reports, is coordinating with the hotel involved (Westin San Francisco) and has notified UPS of the missing items.<br><span style="font-style: italic;">[Evan] Based on the information so far, it appears that UTUIA arranged for Westin to ship two laptops via UPS.&nbsp; One of the laptops contained sensitive personal information.&nbsp; There is no mention of encryption or any other protections in the breach notification, so we can only imagine.</span><br><br>Given the time that has passed since notification, we believe the likelihood of timely recovery is low and therefore are proceeding with notification.<br><span style="font-style: italic;">[Evan] How much time has passed since the laptops were lost/stolen?&nbsp; Neither the New Hampshire or victim notifications disclose this important piece of information.</span><br><br>Currently, there is no indication that the laptop was stolen for its content, but it is possible that there was unauthorized access to information<br><span style="font-style: italic;">[Evan] Do you think that a thief would announce his/her intentions for stealing the laptop?&nbsp; I don't think so.&nbsp; What indication an investigator look for to explain a thief's motives?</span><br><br>We regret this unfortunate situation, and although we have no evidence at this time that any personal information has been accessed or misused, we encourage you to take preventative measures.<br><span style="font-style: italic;">[Evan] What "preventative measures" did UTUIA use to protect personal information for which they were not the owners?&nbsp; Who knows?</span><br><br>We sincerely apologize for any inconvenience that this may cause you.<br><br>If you have additional questions, please call us toll-free at 866-753-3631 between 8:30 a.m. and 4:30 p.m. eastern time, or contact us by mail at 14600 Detroit Avenue, Cleveland, Ohio 44107.<br><br><span style="font-weight: bold;">Commentary:</span><br>In my opinion, there is not enough information in the breach notification sent to the New Hampshire Attorney General or victims.&nbsp; Customers deserve more information about what an organization plans to do in order to provide an adequate amount (owner's discretion) of security.&nbsp; Based on the information we've read in the breach notification, there is no basis for judgment, which is sad.<br><br>What exactly does UTUIA do to protect the confidential information belonging to policyholders?<br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/06/16/utuia.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Mon, 16 Jun 2008 05:37:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/sensitive personal information">sensitive personal information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/utuia">utuia</category>
      <category domain="http://securityratty.com/tag/protect personal information">protect personal information</category>
      <category domain="http://securityratty.com/tag/laptop computers">laptop computers</category>
      <category domain="http://securityratty.com/tag/utuia laptop computers">utuia laptop computers</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/laptops">laptops</category>
      <category domain="http://securityratty.com/tag/utuia offices">utuia offices</category>
      <source url="http://breachblog.com/2008/06/16/utuia.aspx">UTUIA laptops are missing after shipment</source>
    </item>
    <item>
      <title><![CDATA[Personal information from two Colorado mortgage companies found in dumpsters]]></title>
      <link>http://securityratty.com/article/7ae56d34b365648af4041ccd173db81f</link>
      <guid>http://securityratty.com/article/7ae56d34b365648af4041ccd173db81f</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
4/28/08

Organization
Cove Creek Mortgage
Front Range Mortgage, LLC

Contractor/Consultant/Branch
None

Victims
Customers

Number Affected
Unknown

Types...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/covecreek.jpg" align="right" height="82" width="167"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>4/28/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.covecreekmortgage.com/">Cove Creek Mortgage</a> <br><a href="http://www.frontrangemortgage.com/">Front Range Mortgage, LLC</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>Mortgage files, tax returns, pay stubs, Social Security numbers, and other personal information<br><br><span style="font-weight: bold;">Breach Description:</span><br>"ENGLEWOOD, Colo. -- The Arapahoe County District Attorney's Office is advising anyone who has used Cove Creek Mortgage to watch out for identity theft after hundreds of mortgage files were dumped in a public trash bin over the weekend."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.thedenverchannel.com/news/16038972/detail.html">Denver Channel 7 News</a> <br><a href="http://www.thedenverchannel.com/news/16064711/detail.html">Denver Channel 7 News (update)</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Denver Channel 7 News<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>ENGLEWOOD, Colo. -- The Arapahoe County District Attorney's Office is advising anyone who has used Cove Creek Mortgage to watch out for identity theft after hundreds of mortgage files were dumped in a public trash bin over the weekend.<br><span style="font-style: italic;">[Evan] Cove Creek Mortgage joins the ranks of other mortgage companies reported for similar breaches on The Breach Blog.&nbsp; The others are </span><a style="font-style: italic;" href="http://breachblog.com/2008/03/19/affordable.aspx">Affordable Realty</a><span style="font-style: italic;"> and </span><a style="font-style: italic;" href="http://breachblog.com/2008/02/29/unionmortgage.aspx">Union Mortgage Services of Cleveland, Inc.</a><span style="font-style: italic;">. </span><br><br>Cove Creek's owner had abandoned his Englewood office in January, and property managers had not been able to find him<br><i>[Evan] What kind of businessman just abandons an office full of confidential files and equipment?</i><br><br>On Saturday, the property manager had a crew clean out his office and throw all items from the office -- including complete mortgage files -- into two Dumpsters.<br><i>[Evan] Maybe the property manager should pay a little closer attention to the things they throw in the dumpster.&nbsp; Having said this, the property manager is not really at fault.</i><br><br>David Peters who works in the same complex found the files Monday morning.<br><br>"I was taking some other trash out to the garbage can and opened the lid and on there was a couple of laptops,"<br><br>"Directly underneath them were files with people's names on it and I was like, 'Well, this is not right.'"<br><br>"There were tax returns, pay stubs, everything in there," he said. "And as I looked at the different files I realized that it was mortgage files, which was kind of scary, because who do you disclose the most information to or all of your information? That is when you are getting a mortgage loan."<br><i>[Evan] According to the news report, Mr. Peters contacted authorities.&nbsp; This could have easily been much worse for victims.</i><br><br>The Dumpsters were not secured and located at 88 Inverness Drive East, Bldg. F.<br><br>Sheriff's investigators finally found the owner of Cove Creek and talked him into retrieving the files, many of which had private information, including Social Security numbers and credit history.<br><span style="font-style: italic;">[Evan] Mr. owner guy, will you please come get your stuff and the personal information that was entrusted to you?&nbsp; According to </span><a style="font-style: italic;" href="http://www.zoominfo.com/Search/PersonDetail.aspx?PersonID=41991084">zoominfo</a><span style="font-style: italic;"> a guy named Charlie Cartwright is/was the president of Cove Creek Mortgage.&nbsp; I have no idea if this is the same guy that is referred to in the news article.</span><br><br>The district aAttorney's office got a tip about numerous mortgage files and two laptop computers in a Dumpster behind offices formerly used by Cove Creek Mortgage and Front Range Mortgage.<br><i>[Evan] Now Front Range Mortgage joins the ranks.&nbsp; Front Range Mortgage offers <a href="http://www.frontrangemortgage.com/credit_consultants.html">credit repair services</a> too! Do you suppose they could have repaired the damage that could have been done?</i><br><br>"With a name, Social Security number and bank account number, they can clean you out before you even know," said Arapahoe County District Attorney Carol Chambers.<br><br>The files and computers contained sensitive information on many former customers of Front Range Mortgage, including names and addresses, Social Security numbers and bank, credit card and investment account information.<br><br>While there are civil laws against dumping such documentation, Chambers said it is not against the law.<br><i>[Evan] It's too bad that we have to write and enforce laws to protect us from idiots.</i><br><br>"I think it is a matter of legislation not catching up with the realities of identity theft," said Chambers. "And absolutely, we think recklessly disposing or negligently disposing of this kind of information should maybe carry a criminal penalty, just to get people's attention that you can't just leave this information or leave it out in a Dumpster."<br><br>"The district attorney recommends that any former customers of Front Range or Cove Creek should place a fraud alert on their credit reports and monitor any bank, credit card or investment accounts that might have been included on a mortgage application with that firm."<br><br>For further information, assistance or questions, call the District Attorney's Fraud Assistance Line at 720-874-8547.<br><br><b>Commentary:</b><br>What is with these mortgage companies?&nbsp; The 90's and early 2000's was a wild ride for mortgage brokers, real estate agents, and investors.&nbsp; The money attracted people from all walks of life and a lot of poor decisions were made.&nbsp; Now that the bubble has burst, we start to see the true colors of some of these "professionals".<br><br>I don't know much if anything about the owners of these companies, but I do know that securing personal information poorly is bad business. <br><br><b>Past Breaches:</b><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/05/07/covecreek.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Wed, 07 May 2008 18:20:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mortgage files">mortgage files</category>
      <category domain="http://securityratty.com/tag/numerous mortgage files">numerous mortgage files</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/complete mortgage files">complete mortgage files</category>
      <category domain="http://securityratty.com/tag/personal information poorly">personal information poorly</category>
      <category domain="http://securityratty.com/tag/files">files</category>
      <category domain="http://securityratty.com/tag/cove creek mortgage">cove creek mortgage</category>
      <category domain="http://securityratty.com/tag/cove creek">cove creek</category>
      <source url="http://breachblog.com/2008/05/07/covecreek.aspx">Personal information from two Colorado mortgage companies found in dumpsters</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: The New Muni-Fi; Akron Ecstatic; State Park-Fi; Transport-Fi]]></title>
      <link>http://securityratty.com/article/b28970a1a76501a3efcc4353cf32f31a</link>
      <guid>http://securityratty.com/article/b28970a1a76501a3efcc4353cf32f31a</guid>
      <description><![CDATA[Millions in grants for wiring, unwiring communities: This week brings $61m in funding to efforts to put affordable broadband with useful purposes in communities across the U.S., Wired reports, between...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.wired.com/gadgets/wireless/news/2008/04/muni_wireless"><strong>Millions in grants for wiring, unwiring communities:</strong></a> This week brings $61m in funding to efforts to put affordable broadband with useful purposes in communities across the U.S., Wired reports, between a $36m grant from AT&T and its foundation to One Economy, and a $25m effort by the John S. and James L. Knight Foundation. As Wired notes, One Economy will bring broadband to 500,000 low-income Americans in over 50 communities, with private partners handling deploying. They'll also develop audience-appropriate content. The Knight project will bring together grants and best-practices to help communities create self-sustaining Internet access. OneCommunity in Cleveland was cited as an example, and its head will take the job at a new Knight Center of Digital Excellence.</p>

<p><a href="http://www.ohio.com/news/top_stories/17499774.html"><strong>Akron is pretty ecstatic about the new Knight center</strong></a>, which will be built in its midst, as not only will the city become a center of thought about linking up communities, but a wireless project of its own will now be completed more rapidly. The Knight Foundation is putting in $625,000 towards the $2.2m project to unwire 10 sq mi. Other funds are coming from the city and the University of Akron. Akron's local paper, the Beacon Journal, was the first newspaper owned by the Knight family. [link via Daniel McKimm]</p>

<p><a href="http://www.usatoday.com/travel/destinations/2008-04-10-parks-wifi_N.htm#chart"><strong>Parks across the U.S.--about 194 of 3,208--have Wi-Fi, but why?</strong></a> This USA Today article enumerates what parks in which states offer Internet access, but are hard-pressed to explain why it's useful. I do like the idea myself of having a lifeline back to people and information even when I'm away from it all, but it's hardly a necessity.</p>

<p><a href="http://www.usatoday.com/tech/wireless/2008-04-10-wifi_N.htm"><strong>USA Today also runs down some transportation-Fi:</strong></a> The newspaper runs through a list of where Wi-Fi is available on various means of transit. </p>]]></content:encoded>
      <pubDate>Fri, 11 Apr 2008 08:43:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/akron">akron</category>
      <category domain="http://securityratty.com/tag/foundation">foundation</category>
      <category domain="http://securityratty.com/tag/knight foundation">knight foundation</category>
      <category domain="http://securityratty.com/tag/offer internet access">offer internet access</category>
      <category domain="http://securityratty.com/tag/internet access">internet access</category>
      <category domain="http://securityratty.com/tag/project">project</category>
      <category domain="http://securityratty.com/tag/center">center</category>
      <category domain="http://securityratty.com/tag/knight center">knight center</category>
      <category domain="http://securityratty.com/tag/communities">communities</category>
      <source url="http://wifinetnews.com/archives/008271.html">Wee-Fi: The New Muni-Fi; Akron Ecstatic; State Park-Fi; Transport-Fi</source>
    </item>
    <item>
      <title><![CDATA[Another mortgage company out of business leads to more documents in the dumpster]]></title>
      <link>http://securityratty.com/article/85b93bd12c93d79cf76aababb75a2f48</link>
      <guid>http://securityratty.com/article/85b93bd12c93d79cf76aababb75a2f48</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
3/19/08

Organization
Affordable Realty

Contractor/Consultant/Branch
None

Victims
Customers

Number Affected
hundreds

Types of Data
Social Security...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/affordable.jpg" align="right" height="148" width="200"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>3/19/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.manta.com/coms2/dnbcompany_gswxbm">Affordable Realty</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>"hundreds"<br><br><span style="font-weight: bold;">Types of Data:</span><br>"Social Security numbers and financial records"<br><br><span style="font-weight: bold;">Breach Description:</span><br>"Social Security numbers and financial records of customers of a Flint-based realty mortgage company have been found in a dumpster. "<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://abclocal.go.com/wjrt/story?section=news/local&amp;id=6029957">WJRT ABC Channel 12 News</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Dawn Jones, ABC12 News Team<br><br><span style="font-weight: bold;">Response:</span><br>From the online source cited above:<br><br>The personal information of hundreds of local residents is now out in public view. <br><br>Social Security numbers and financial records of customers of a Flint-based realty mortgage company have been found in a dumpster.<br>&nbsp;<br>Affordable Realty occupied office space inside the Ben Agree building on Dort Highway for years.<br>&nbsp;<br>The company was evicted and all of its sensitive customer information ended up outside in a dumpster or on the ground nearby.<br><span style="font-style: italic;">[Evan] Maybe the company figured that they had nothing to lose and just vacated the property.&nbsp; There is liability however.&nbsp; The leader(s) of the company is/are morally, ethically, and probably legally responsible for proper document destruction.&nbsp; There really is no excuse.</span><br><br>Included in the papers are bankruptcy statements, financial records, Social Security numbers and addresses of clients who once did business with Affordable Realty.<br><br>Witnesses say the business had recently been evicted and they report seeing Genesee County Sheriff's Deputies clearing the office space a few days ago.<br><span style="font-style: italic;">[Evan] So am I safe to assume that the Genesee County Sheriff's Deputies actually had a hand in the poor handling of sensitive documents?&nbsp; Perhaps they could have been more careful and taken the time to identify sensitive documents before throwing them in the dumpster.</span><br><br>Since that time, at least one person claims to have seen people rummaging through the dumpster, picking up papers, going through them very carefully and walking away with some.<br><br>We talked to Genesee County Sheriff Robert Pickell about how this type of personal information should be handled.<br>&nbsp;<br>"What the process server should have done is get the stuff, call the landlord and say 'I'm packing this up, I'm putting it into my truck, I'm taking it to my warehouse. You're gonna have to pay for the storage,'" Pickell told ABC12's Dawn Jones.<br><span style="font-style: italic;">[Evan] And what the Sheriff's Deputies should have done is taken more care before throwing the documents in the dumpster.</span><br><br>The sheriff talks more about identity theft and how to protect your identity coming up later today on ABC12 News.<br><br><span style="font-weight: bold;">Commentary:</span><br>This isn't the first time we have read about personal information being discarded/disclosed in a public dumpster after a company has gone out of business.&nbsp; Last month included <a href="http://breachblog.com/2008/02/29/unionmortgage.aspx">Union Mortgage Services of Cleveland, Inc.</a> and <a href="http://breachblog.com/2008/02/21/firstmagnus.aspx">First Magnus Financial Corporation</a>.&nbsp; Throwing large amounts of documentation containing personal information in the trash is completely in-excusable and lazy.&nbsp; The good thing is that the companies are now out of business; the bad thing is that they may have taken some good people along with them.<br><br>I am concerned and uneasy about the fact that the Genesee County Sheriff's Deputies did not notice or take the time to investigate what the documents contained. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/03/19/affordable.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Wed, 19 Mar 2008 11:57:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/company">company</category>
      <category domain="http://securityratty.com/tag/abc12 news team">abc12 news team</category>
      <category domain="http://securityratty.com/tag/news">news</category>
      <category domain="http://securityratty.com/tag/dumpster">dumpster</category>
      <category domain="http://securityratty.com/tag/documents">documents</category>
      <category domain="http://securityratty.com/tag/sheriff">sheriff</category>
      <category domain="http://securityratty.com/tag/sheriff talks">sheriff talks</category>
      <category domain="http://securityratty.com/tag/company isare">company isare</category>
      <category domain="http://securityratty.com/tag/abc12 news">abc12 news</category>
      <source url="http://breachblog.com/2008/03/19/affordable.aspx">Another mortgage company out of business leads to more documents in the dumpster</source>
    </item>
    <item>
      <title><![CDATA[Union Mortgage loan applicant information found in dumpster]]></title>
      <link>http://securityratty.com/article/e521113877509ae97abc821cd675e5d7</link>
      <guid>http://securityratty.com/article/e521113877509ae97abc821cd675e5d7</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
2/22/08, updated on 2/28/08

Organization
Union Mortgage Services of Cleveland, Inc

Contractor/Consultant/Branch
None

Victims
Loan applicants

Number...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/mortgage.jpg" align="right" height="184" width="200"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>2/22/08, updated on 2/28/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.unionmortgageservices.com/">Union Mortgage Services of Cleveland, Inc.</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Loan applicants<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown*<br><br><font size="1">*"hundreds of people" including "Thousands of pages of sensitive documents"</font><br><br><span style="font-weight: bold;">Types of Data:</span><br>Information that is typically found in loan applications, including bank statements, credit reports, and tax returns.<br><br><span style="font-weight: bold;">Breach Description:</span><br>Thousands of pages of sensitive loan application information were discovered in a dumpster behind a pizza shop in Cleveland, Ohio.&nbsp; The documents were allegedly discarded by employees of Union Mortgage Services of Cleveland, Inc., which has closed down after failing to pay taxes or failure to file tax returns.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.wkyc.com/news/news_article.aspx?storyid=83808">WKYC-TV News</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>WKYC-TV News, by way of Attrition.org<br><br><span style="font-weight: bold;">Response:</span><br>From the online source cited above:<br><br>Thousands of pages of sensitive documents were thrown out in a dumpster located behind a pizza shop at East 105th and Superior in Cleveland.<br><br>Confidential files were found on hundreds of people who applied for loans with a company called Union Mortgage, whose last known addresses were in Beachwood and Parma.<br><span style="font-style: italic;">[Evan] Union Mortgage Services addresses are/were; 23611 Chagrin Blvd Suite 275 </span><span style="font-style: italic;">Beachwood, OH 44122 and 1440 Snow Road Suite 118 Parma, OH 44134</span><br><br>Investigator Tom Meyer learned the company closed its doors recently after either failing to pay taxes or file its tax returns<br><span style="font-style: italic;">[Evan] Sounds shady for a mortgage company that people trust much of their financial lives with.</span><br><br>Channel 3 News retrieved as many documents as possible and returned them to their rightful owners.<br><br>Ken Knabe, a lawyer from Lakewood, was shocked that we had his bank accounts, credit reports, tax returns and other personal information including his social security number. "That's appalling. This is private information in a dumpster,"<br><br>Channel 3 News returned files of information on Kim and Edwin Soeder of Mentor, including their retirement accounts. "It makes you wonder how bad your credit rating becomes if people get this in their hands," said Mrs. Soeder.<br><br>Ohio Attorney General, Marc Dann, has sued another mortgage company, Randall Mortgage Services, Inc., for allegedly abandoning customers' loan and financial information. Dann says he would take action against Union Mortgage if customers came forward and filed complaints with his office.<br><br><img src="http://images.quickblogcast.com/95781-88451/marcdann.jpg" border="0" width="124"><br><br><span style="font-style: italic;">[Evan] Attorney General Marc Dann's site has some good information for consumers.&nbsp; To file a complaint, visit <a href="http://www.ag.state.oh.us/citizen/consumer/complaints.asp">http://www.ag.state.oh.us/citizen/consumer/complaints.asp</a></span><br><br>Dann said businesses that collect personal information are responsible for protecting it just like they would protect their own information.<br><br><span style="font-weight: bold;">Commentary:</span><br>This is similar to the <a href="http://breachblog.com/2008/02/21/firstmagnus.aspx">First Magnus breach</a> reported earlier this month.&nbsp; Similarities include two financially troubled (or bankrupt) loan companies that figured their obligation to protect confidential personal information ceased when they closed the doors.&nbsp; The obligation to protect information entrusted to you only ceases when you transfer custodianship (i.e. return it to the owner, destruction, etc.)<br><br>I assume that we will only continue to see more of these types of breaches as more loan companies continue to suffer from today's credit crunch.&nbsp; When I researched Union Mortgage Services for this posting, I had a general sense of uneasiness.&nbsp; The lack of discovered background information and other legitimate references about the company might have made me question whether or not I would have done business with them in the first place.&nbsp; Hindsight is 20/20 they say. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/02/29/unionmortgage.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Fri, 29 Feb 2008 11:14:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/collect personal information">collect personal information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/union mortgage">union mortgage</category>
      <category domain="http://securityratty.com/tag/loan">loan</category>
      <category domain="http://securityratty.com/tag/loan companies continue">loan companies continue</category>
      <category domain="http://securityratty.com/tag/loan companies">loan companies</category>
      <category domain="http://securityratty.com/tag/union mortgage services">union mortgage services</category>
      <category domain="http://securityratty.com/tag/background information">background information</category>
      <source url="http://breachblog.com/2008/02/29/unionmortgage.aspx">Union Mortgage loan applicant information found in dumpster</source>
    </item>
    <item>
      <title><![CDATA[SaaS and data security - here is the rub]]></title>
      <link>http://securityratty.com/article/ac3ac4777c62f361a42f07da96c1eb67</link>
      <guid>http://securityratty.com/article/ac3ac4777c62f361a42f07da96c1eb67</guid>
      <description><![CDATA[One of the knocks against outsourcing applications and storage has always been control or rather the lack of it. Whether I am referring back to my Interliant days where we stored customers Lotus Notes...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>One of the knocks against outsourcing applications and storage has always been control or rather the lack of it.&nbsp; Whether I am referring back to my Interliant days where we stored customers Lotus Notes and PeopleSoft financials data or Qualys storing their customers vulnerability data or as <a href="http://blogs.computerworld.com/storing_medical_records_online_with_google">Douglas Schweitzer&nbsp; over at ComputerWorld points out</a>, Google's plan to pilot a program with the world renowned Cleveland Clinic to store patients medical records on line, the idea of confidential, sensitive data being out of your direct and sole control scares many people. Never mind that the data may be more secure with the controls these SaaS providers put in place to than it would be in your own location.&nbsp; There is just something about the concept that deep down instinctually turns people off.<br /><br />To be fair, the SaaS industry has done many things to overcome this bias.&nbsp; 3rd party audits of security procedures have helped.&nbsp; Also having the data encrypted with only you holding the key helps get many people comfortable.&nbsp; In fact over the last few years, I think on the whole we are seeing more and more IT and risk management departments getting comfortable with outsourcing their applications and the storage of this sensitive data. There are still some last bastions of holdouts, such as the US government with vulnerability data.&nbsp; But as I say, by and large it is much more acceptable.&nbsp; However, every time we take this paradigm to another market, such as confidential medical data the whispers and old doubts surface again.&nbsp; I think if we are truly going to see the Google Apps or Microsoft Live office stuff really take off, people are going to have to get over this phobia.&nbsp; Whether they do or not will go a long way towards determining if this is just a passing fad or the longterm future of the software industry.</p></div>
]]></content:encoded>
      <pubDate>Wed, 27 Feb 2008 14:32:58 +0000</pubDate>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/peoplesoft financials data">peoplesoft financials data</category>
      <category domain="http://securityratty.com/tag/customers vulnerability data">customers vulnerability data</category>
      <category domain="http://securityratty.com/tag/confidential medical data">confidential medical data</category>
      <category domain="http://securityratty.com/tag/sensitive data">sensitive data</category>
      <category domain="http://securityratty.com/tag/vulnerability data">vulnerability data</category>
      <category domain="http://securityratty.com/tag/comfortable">comfortable</category>
      <category domain="http://securityratty.com/tag/people comfortable">people comfortable</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/02/saas-and-data-s.html">SaaS and data security - here is the rub</source>
    </item>
    <item>
      <title><![CDATA[SaaS and data security - here is the rub]]></title>
      <link>http://securityratty.com/article/f66166bc6a3c676b0ccdf16e31519aea</link>
      <guid>http://securityratty.com/article/f66166bc6a3c676b0ccdf16e31519aea</guid>
      <description><![CDATA[One of the knocks against outsourcing applications and storage has always been control or rather the lack of it. Whether I am referring back to my Interliant days where we stored customers Lotus Notes...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>One of the knocks against outsourcing applications and storage has always been control or rather the lack of it.&nbsp; Whether I am referring back to my Interliant days where we stored customers Lotus Notes and PeopleSoft financials data or Qualys storing their customers vulnerability data or as <a href="http://blogs.computerworld.com/storing_medical_records_online_with_google">Douglas Schweitzer&nbsp; over at ComputerWorld points out</a>, Google's plan to pilot a program with the world renowned Cleveland Clinic to store patients medical records on line, the idea of confidential, sensitive data being out of your direct and sole control scares many people. Never mind that the data may be more secure with the controls these SaaS providers put in place to than it would be in your own location.&nbsp; There is just something about the concept that deep down instinctually turns people off.<br /><br />To be fair, the SaaS industry has done many things to overcome this bias.&nbsp; 3rd party audits of security procedures have helped.&nbsp; Also having the data encrypted with only you holding the key helps get many people comfortable.&nbsp; In fact over the last few years, I think on the whole we are seeing more and more IT and risk management departments getting comfortable with outsourcing their applications and the storage of this sensitive data. There are still some last bastions of holdouts, such as the US government with vulnerability data.&nbsp; But as I say, by and large it is much more acceptable.&nbsp; However, every time we take this paradigm to another market, such as confidential medical data the whispers and old doubts surface again.&nbsp; I think if we are truly going to see the Google Apps or Microsoft Live office stuff really take off, people are going to have to get over this phobia.&nbsp; Whether they do or not will go a long way towards determining if this is just a passing fad or the longterm future of the software industry.</p></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=UKOpGf"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=UKOpGf" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=FTHaSTE"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=FTHaSTE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=m6uMmIE"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=m6uMmIE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=OSMIBOE"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=OSMIBOE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=wiQLoKE"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=wiQLoKE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=0EnruaE"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=0EnruaE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=uD3Ls5E"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=uD3Ls5E" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=8gVXK4E"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=8gVXK4E" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=4IIbm5e"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=4IIbm5e" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=AqzNMHE"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=AqzNMHE" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Wed, 27 Feb 2008 13:33:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/peoplesoft financials data">peoplesoft financials data</category>
      <category domain="http://securityratty.com/tag/customers vulnerability data">customers vulnerability data</category>
      <category domain="http://securityratty.com/tag/confidential medical data">confidential medical data</category>
      <category domain="http://securityratty.com/tag/sensitive data">sensitive data</category>
      <category domain="http://securityratty.com/tag/vulnerability data">vulnerability data</category>
      <category domain="http://securityratty.com/tag/comfortable">comfortable</category>
      <category domain="http://securityratty.com/tag/people comfortable">people comfortable</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/242361330/saas-and-data-s.html">SaaS and data security - here is the rub</source>
    </item>
    <item>
      <title><![CDATA[Centralized, electronic storage of medical records]]></title>
      <link>http://securityratty.com/article/c84c7747d777478db8f755328dc933b2</link>
      <guid>http://securityratty.com/article/c84c7747d777478db8f755328dc933b2</guid>
      <description><![CDATA[There has been a plethora of blog postings, articles, and other assorted attempts to put the Google/Cleveland Clinic medical records pilot into perspective. The pilot is described in a Newsday...]]></description>
      <content:encoded><![CDATA[There has been a plethora of blog postings, articles, and other assorted attempts to put the Google/Cleveland Clinic medical records pilot into perspective.  The pilot is described in a Newsday article.
<blockquote>Google, the California search engine company, and the Cleveland Clinic - an Ohio medical institution with a reputation for quality care - said last week they will collaborate on a pilot program to store patient records online.

The test program will allow 1,5]]></content:encoded>
      <pubDate>Wed, 27 Feb 2008 07:46:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/pilot">pilot</category>
      <category domain="http://securityratty.com/tag/pilot program">pilot program</category>
      <category domain="http://securityratty.com/tag/ohio medical institution">ohio medical institution</category>
      <category domain="http://securityratty.com/tag/engine company">engine company</category>
      <category domain="http://securityratty.com/tag/blog postings">blog postings</category>
      <category domain="http://securityratty.com/tag/quality care">quality care</category>
      <category domain="http://securityratty.com/tag/cleveland clinic">cleveland clinic</category>
      <category domain="http://securityratty.com/tag/newsday article">newsday article</category>
      <category domain="http://securityratty.com/tag/test program">test program</category>
      <source url="http://networking.ittoolbox.com/r/rss.asp?url=http://blogs.ittoolbox.com/security/adventures/archives/centralized-electronic-storage-of-medical-records-22748">Centralized, electronic storage of medical records</source>
    </item>
    <item>
      <title><![CDATA[Google to manage health records for Cleveland Clinic]]></title>
      <link>http://securityratty.com/article/5ff5ad2c3f1ed87c88e196d9f1ffcf08</link>
      <guid>http://securityratty.com/article/5ff5ad2c3f1ed87c88e196d9f1ffcf08</guid>
      <description><![CDATA[Google will test a new online medical record service with a hospital group in Cleveland allowing patients to control who gets to see their health information. The two organizations hope the trial will...]]></description>
      <content:encoded><![CDATA[Google will test a new online medical record service with a hospital group in Cleveland allowing patients to control who gets to see their health information. The two organizations hope the trial will lead to the creation of a national system for sharing electronic medical records.]]></content:encoded>
      <pubDate>Wed, 20 Feb 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/electronic medical records">electronic medical records</category>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/health information">health information</category>
      <category domain="http://securityratty.com/tag/cleveland">cleveland</category>
      <category domain="http://securityratty.com/tag/organizations hope">organizations hope</category>
      <category domain="http://securityratty.com/tag/national system">national system</category>
      <category domain="http://securityratty.com/tag/lead">lead</category>
      <category domain="http://securityratty.com/tag/trial">trial</category>
      <category domain="http://securityratty.com/tag/test">test</category>
      <source url="http://www.networkworld.com/news/2008/022108-google-to-manage-health-records.html?fsrc=rss-security">Google to manage health records for Cleveland Clinic</source>
    </item>
  </channel>
</rss>
