Woman arrested in suspicion of ID theft
April 25th, 2008
A woman suspected of identity theft and registering fraudulent businesses in several Bay Area cities was arrested in Antioch on Thursday, the Police Department reported today.
ABC7News.com Reports that Michelle Gaye Perkins, 43, allegedly used her position as owner of the Senior's Resource Center in Texas to take information from an employee's application and open credit card accounts in California, police said.
The center had closed by the time the victim realized her information had been taken. She filed police reports and investigated, discovering that Perkins had moved to California and charged about $5,000 on the credit card and used it to rent a house
Women Are Four Times More Likely to Give Up Passwords for Chocolate
April 16th, 2008
DarkReading reports that As part of this week's Infosecurity Europe conference, researchers stood outside the Liverpool Street tube station in London and offered 576 office workers a bar of chocolate for filling out a survey.
Included in the survey was a range of personal information, including name, address, birthdate, and computer passwords. While 45 percent of the women surveyed provided the passwords, only 10 percent of the men did so.
Overall, the local population did much better this year than during the 2007 Infosecurity Europe conference, when 64 percent of all respondents gave up their personal data for chocolate. This year, only 21 percent offered their passwords.
New York Hospital Worker Arrested for Stealing 50,000 Patient Records
April 14th, 2008
DarkReading reports that A hospital admissions worker was arrested this weekend for allegedly stealing the personal information of some 50,000 patients out of a database and selling some of it to an identity theft ring.
Dwight McPherson, 38, a former worker at New York-Presbyterian Hospital/Weill Cornell Medical Center, was arrested Friday night, shortly after the hospital announced the security breach, according to the Associated Press.
Interestingly, the breach had not been discovered by the hospital. McPherson was exposed when police and postal inspectors in Atlanta raided a suspected identity theft ring. Among the papers they found were 221 documents from the hospital, which allegedly were sent to the ring by McPherson.
IRS commissioner promises faster response to ID theft
April 10th, 2008
GovernmentExecutive.com reports that Tax preparer Rebecca Spencer told Congress Thursday how it took two months, after contacts with four Internal Revenue Service offices, for a client to receive a tax refund that she had been deprived of because she was the victim of identity theft.
Spencer, of Montana, told the Senate Finance Committee that 10 days after the IRS had been notified that there was a problem, the IRS had released the refund to the fraudulent taxpayer. It was only because Spencer had notified the bank of the identity theft that the payment was held up.
Her client may have been lucky. Finance Committee Chairman Max Baucus, D-Mont., said that on average it takes almost a year for the IRS to sort out who is the real taxpayer when there is an identity issue. "In the meantime the victim's tax accounts get frozen. The IRS issues no refund," he said. "The taxpayer waits in tax limbo for months and months."
High-Tech Crime Is an Online Bubble That Hasn�t Burst
April 7th, 2008
The New York TImes reports that There are no storefronts or corporate headquarters in the cybercrime industry, just savvy sellers in a murky, borderless economy who are moving merchandise by shilling credit card numbers — “two for the price of one.”
“Sell fresh CC,” promised one who offered teaser credit card numbers. “Visa, MasterCard, Amex. Good Prices. Many countries.”
Electronic crime is maturing, according to security experts, and with its evolution, criminals are adopting conventional approaches like supermarket-style pricing and outsourcing to specialists who might act as portfolio managers or computer technicians.
Students fall victim to massive phishing scheme
April 4th, 2008
The Observer Online reports that The Internet has become a convenient way to address several daily activities, like banking, paying bills, or purchasing tickets to the ball game, but in the process, sensitive information is vulnerable, including credit card numbers and social security numbers.
Lately, there has been an increase in "phishing" scams in an attempt by malicious users to gain valuable information. Phishing attacks are attempts to gain sensitive information by sending e-mail messages that appear to come from legitimate companies or individuals.
The e-mail messages may ask to verify account information for any number of reasons. In the process, the recipient is asked for guarded information such as usernames, passwords, birthdates, social security numbers, and account numbers.
Web Crime Spikes in 2007, Losses Near $240M
April 4th, 2008
eCommerce Times is reporting that The financial losses tied to Internet
crime reached record levels in 2007, the FBI said Thursday, citing data from its annual Internet Crime Report.
The Internet Crime Complaint Center, or IC3 -- which the FBI operates along with the nonprofit National White Collar Crime Center -- fielded 206,884 complaints of crimes perpetrated over the Internet during 2007, the bureau said. Of those, about 90,000 were referred to law enforcement agencies for follow-up, and the dollar value of those cases is estimated at around US$240 million in losses.
That's an increase of $40 million, or 20 percent, over the year before in the total value of the referred cases. Though the dollar amount lost set a record, the IC3 has referred more cases in the past, as in 2004, when it sent some 104,000 cases to other agencies.
Army Runs Fake Spam Site
April 2nd, 2008
OhMyGov.com reports that Over 10,000 soldiers, civilians, and military family members with .mil email extensions were duped by a bizarre, security exercise conducted by the Army on Sunday. The exercise set out to test susceptibility to phishing - attempts to fraudulently acquire sensitive information, such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in an electronic medium.
To conduct the exercise, the Army Computer Emergency Response Team sent e-mails promising free tickets to area theme parks which linked to a website posing as the site for the Family and Morale, Welfare and Recreation Command (FMWRC) - a real military family support organization. The only problem was, no one bothered to tell the organization that their name was being used to conduct the exercise. Oops!
When FMWRC realized they were being used fraudulently for phishing, they immediately distributed a press release to media outlets world-wide in an effort to warn as many customers as possible that the offer was fraudulent. At the same time, they hustled to coordinate with Army legal and information technology offices to have the bogus website shut down.
Secret software blamed for Hannaford breach
March 28th, 2008
MSNBC reports that Unauthorized software that was secretly installed on servers in nearly all of Hannaford Bros. Co.'s supermarkets enabled the massive data breach that compromised up to 4.2 million credit and debit cards, the company said Friday.
The Scarborough, Maine-based grocer confirmed a report in The Boston Globe that it told Massachusetts regulators this week about the link to the illicit computer "malware."
The company doesn't know how the malware — short for malicious software — got to the stores' servers, Hannaford spokeswoman Carol Eleazer said.
Breach exposes 4.2 million credit, debit cards
March 17th, 2008
MSNBC reports that A security breach at an East Coast supermarket chain exposed more than 4 million card numbers and led to 1,800 cases of fraud, the Hannaford Bros. grocery chain announced Monday.
Hannaford said credit and debit card numbers were stolen during the card authorization process and about 4.2 million unique card numbers were exposed, placing the case among the largest data breaches ever.
The breach affected all of its 165 stores in the Northeast, 106 Sweetbay stores in Florida and a smaller number of independent groceries that sell Hannaford products.
The impostor in the ER
March 13th, 2008
Medical identity theft can leave you with hazardous errors in health records
MSNBC reports that Katrina Brooke felt well prepared for the birth of her son, Andrew, three Aprils ago. The only complication was her Caesarean section; otherwise, everything went smoothly. After three days in the hospital, Brooke returned to her home outside of Seattle to recover and enjoy her baby boy.
Three weeks later, as Brooke stood in her kitchen opening mail, she found a curious $94 bill from a local health clinic, a place neither she nor her husband had ever heard of. Stranger still, the notice was addressed to her newborn son: Andrew had apparently visited the clinic and been prescribed the painkiller OxyContin for a work-related back injury.
Hacker breached data at Harvard University
March 13th, 2008
MSNBC reports that Harvard University is notifying thousands of graduate students and applicants that their personal information may have been exposed by a data breach.
The Ivy League school says a computer hacker gained entry to its server last month.
Harvard says about 10,000 of last year's applicants may have had their personal information compromised, with 6,600 having their Social Security numbers exposed.
Credit card fraudsters hid camera in ceiling
February 29th, 2008
The TIMESONLINE reports that Hundreds of motorists have been caught out by a credit card cloning scam after filling up with fuel at a petrol station in Lincolnshire.
Fraudsters drilled a hole in the ceiling above the filling station’s chip-and-PIN machine and filmed customers keying in their numbers. The fraudsters then produced replica credit cards that they sent to criminal associates around the world.
Within hours of customers using their credit cards to make payments at the garage near a roundabout on the A46 in Lincoln, the replica cards were being used fraudulently in locations such as India and Dubai. More than 200 motorists have had hundreds of pounds taken from their bank accounts. It is expected many more victims of the fraud will come forward as they check their statements.
Former BofA VP Robert Conner sentenced to 9.5 years in jail
February 20th, 2008
The St. Louis Business Journal reports that Former Bank of America Vice President Robert Conner has been sentenced to 114 months in prison after being convicted in November of 36 federal charges involving a $1.4 million bank and credit card fraud scheme, U.S. Attorney Catherine Hanaway announced Wednesday.
Conner, 44, of St. Louis, was a vice president of Bank of America's Chesterfield, Mo., branch.
According to Hanaway's release, between June 2005 and November 2006, it was part of this scheme that Conner provided 16 co-defendants an opportunity to submit false applications for small business lines of credit with Bank of America, in the form of credit cards. A total of about $1.4 million in fraudulent charges were made on cards fraudulently approved by Conner.
Cyberthieves go phishing to rob banks
February 14th, 2008
CNN reports that Notorious 20th-century bank robber Willie Sutton said famously, "I rob banks because that's where the money is."
It seems 21st-century criminals are following his footsteps.
But while Sutton disguised himself as a cop, a window washer and a Western Union messenger, cyberthieves use a different type of subterfuge -- phishing -- to cover their identities and wipe out bank accounts.
ID theft mastermind gets 65 months
February 12th, 2008
CRIME DOESN'T PAY ~ The Sacramento Bee is reporting that U.S. Attorney McGregor Scott announced Monday that the ringleader of an identity-theft ring had been sentenced to 65 months in federal prison.
Jodi Lynn Garcia, 32, of Paradise was sentenced by U.S. District Judge Frank C. Damrell Jr., according to Scott's news release.
Garcia was convicted of recruiting several people to cash checks stolen from the mail and of counterfeiting checks using account numbers obtained from stolen financial information, the release said
The conspirators caused losses of between $30,000 and $70,000 to financial institutions, the release said. From November 2006 to July 2007, more than 50 people were victims of theft.
Garcia recruited the following people:
Heather A. Morshead, 25, of Magalia, who pleaded guilty to conspiracy and bank fraud. Her sentencing is scheduled for March 3.
Heather M. Wilson, 34, and Tiffany A. Sabral, 27, both of Chico, and Tanya L. Wellman, 37, of Durham, who each pleaded guilty to bank fraud and conspiracy. Each was sentenced to time served plus 36 months' probation.
Another alleged recruit, Melissa A. Meier, 19, of Chico, faces charges of aggravated identity theft, bank fraud and possession of stolen mail.
– Bee Metro staff
Calif. Senate strengthens breach notification law
February 6th, 2008
SC Magazine is reporting that The State Senate in California has passed by wide margins measures that require more extensive notification to consumers of data breaches, establish a central reporting center for breaches, and permit local prosecution of identity theft.
The bills, SB364 (privacy) and SB612 (ID theft prosecution), passed by 30-7 and 40-0 votes, respectively. Both measures were authored by State Sen. Joe Simitian, who sponsored SB1386, California's original breach notification law in 2002.
Visa adds to its list of payment apps that improperly store card data
January 31st, 2008
Computerworld is reporting that Visa Inc. this week privately issued an updated list of payment applications that store all of the magnetic-stripe data taken from credit and debit cards, as part of its ongoing effort to get retailers and other merchants to stop using such software.
Visa began distributing the list last April and has updated it every three months since then. The company doesn't make the list openly available and hasn't publicly identified any of the vendors whose products are on it. Instead, Visa sends the list to so-called acquiring banks, the financial institutions that authorize merchants to accept payment-card transactions.
A Visa spokesman said today that the company has tried to keep the list under wraps because of concerns that making it public would give hackers "a tip sheet" for identifying retail systems that store sensitive data about cardholders. He noted that Visa expressly asks the recipients of the list, which also include payment processors and software vendors, not to publish it or make it available on publicly accessible Web sites.
Tax time brings phishing season
January 29th, 2008
The Times-Herald reports that A new wave of "phishing" e-mails making the rounds, claiming to be from the IRS, may be the work of scammers trying to capitalize on an economic stimulus package under consideration by Congress, an IRS spokesman said Monday.
"People may see these and say, 'Well, I'm supposed to get a refund. Maybe this is it,' " said Internal Revenue Service spokesman Jesse Weller.
"The IRS never sends unsolicited initial e-mails," IRS spokesman Bill Steiner said. Nor does it ever ask for detailed personal and financial information, personal identification numbers, passwords or similar access information for credit cards, banks or other financial accounts, the men said.
Privacy Watch: Wireless Keyboards That Blab
January 29th, 2008
PCWORLD reports that Input devices that share a radio frequency can also share keystroke information across surprisingly long distances.
Wireless keyboards are more convenient than standard wired models--after all, who doesn't want to get rid of another cord on their desk? But, as an unfortunate pair of wireless keyboard owners found out, the long range of some devices can make them a privacy and security risk.
A couple of neighbors in the Norwegian town of Stavenger both had new wireless keyboards from HP. These keyboards, like most other wireless models, transmit keypresses to the computer via radio signals that are beamed to a receiver. But the neighbors quickly discovered that if both of them used their PCs at the same time--even though they were more than a football field's length away from each other in different apartments--both receivers would output anything that either neighbor typed.
HP's product manager in Norway, Tore Särelind, was at a loss to explain the malfunction. "We have no logical or technical explanation for how this is possible," Särelind said. "The keyboard should have a theoretical radius of about 20 meters."
Radio experts say that local weather conditions, or even unshielded power cables, have the ability to amplify or increase the range of radio signals.
Lost Laptop Exposes Nashville Voters to Identity Theft
January 19th, 2008
PCWORLD is reporting that Thieves have stolen two laptops containing unencrypted Social Security numbers of 337,000 Tennessee residents.
The theft of a laptop containing Social Security numbers of Nashville, Tennessee, area voters is expected to cost local officials about US$1 million as they roll out identity-theft protection to those affected.
County officials say that thieves broke into Davidson County Election Commission offices on the weekend before Christmas, smashing a window with a rock and then making off with a $3,000 router, a digital camera and a pair of Dell Latitude laptops containing names and Social Security numbers of all 337,000 registered voters in the county.
Twice bitten: Acts of stupidity can lead to identity theft
January 10th, 2008
cNet blogs is reporting that A British TV presenter has learned the hard way that identity theft is serious, and in the process, become the joke of the moment for privacy bloggers. More importantly, this is the second time in just one year that such a thing has happened. This blog post explores the latest incident, looks back to the past, and then concludes with a more broad analysis.
Data Breaches, Thefts on the Rise
January 2nd, 2008
The Washingtonpost.com is reporting that Wireless Transmissions Seen as Vulnerable to Hackers
Companies, government agencies, schools and other institutions are spending more to protect ever-increasing volumes of personal data such as credit card and Social Security numbers with more sophisticated firewalls and encryption, but the investment often is too little, too late.
"More of them are experiencing data breaches, and they're responding to them in a reactive way, rather than proactively looking at the company's security and seeing where the holes might be," said Linda Foley, an identity theft victim who founded the Identity Theft Resource Center.
Foley's group lists more than 79 million records reported compromised in the United States through Dec. 18. That compares with nearly 20 million records reported in all of 2006.
Report: Identity Theft Worse in 2008
January 2nd, 2008
Data Storage Today is reporting that In its latest report on data breaches and identity theft, the Identity Theft Resource Center (ITRC) offered several disturbing predictions for 2008. For example, the ITRC predicts identity theft will continue to grow more international in scope and that identity-theft scams will become more sophisticated and will be harder to detect
According to the latest data from the Identity Theft Resource Center (ITRC), the number of publicly reported data breaches in the U.S. rose by more than 40 percent in 2007.
The ITRC cited 443 publicly reported breaches in 2007 as of December 24. That compares to 315 publicized breaches in 2006. In all, 127 million data records were exposed during 2007, compared to nearly 20 million in 2006. In 2005, the ITRC reported 158 publicly disclosed breaches exposing about 65 million records.
Identity theft continues to thrive despite efforts by governmental agencies, businesses, consumer advocates, and law enforcement. Identity thieves keep finding innovative new ways to steal, and are becoming more sophisticated and skilled at their craft.
Credit Card Security Features Worth Opting For
January 2nd, 2008
SmartMoney reports that USING A CREDIT CARD may be the most secure way to make a purchase, but that doesn't mean it's safe.
Credit card fraud remains the most common form of identity theft, accounting for 25% of cases in 2006, according to the Federal Trade Commission. "Credit cards have become a significant — and growing — part of the identity theft equation," says Curtis Arnold, founder of CardRatings.com. Blame its popularity on the numerous methods thieves can employ to get their hands on your credit card information — and the ease with which they can exploit it. Should someone obtain your Social Security number, lines of credit are often the first new accounts opened.
Of course, avoiding this type of identity theft depends largely on your own behavior. Among other things, you need to properly shred those unused cash advance checks and new card offers, shop only through secure web sites, resist replying to phishing emails, and keep a firm grip on your wallet.
Online Records May Aid ID Theft: Government Sites Post Personal Data
January 1st, 2008
The Washington Post Reports that Colin L. Powell's Social Security number is out there. So is Troy Aikman's. The "social" of Maryland Attorney General Douglas F. Gansler (D) is xxx-xx-xx34.
In an era when government officials from President Bush to local sheriffs warn of the growing dangers of identity theft, the full Social Security numbers of untold numbers of Americans can be found in file rooms and on Web sites run by, well, governments.
"This is very dangerous," Gansler said after learning that his number had been posted on a Maryland government records site. "You know, a Social Security number is really the fingerprint to somebody's identification."
The Federal Trade Commission has estimated that 8.3 million Americans were victims of identity theft in 2005, the most recent data available. But the crown jewel in identity theft -- the Social Security number -- can be mined easily in the government's own records, creating a measure of social insecurity for millions, according to identity experts.
Personal Data Theft Reaches Unprecedented Levels in 2007
December 31st, 2007
FOXNEWS.com is reporting that The loss or theft of personal data such as credit card and Social Security numbers soared to unprecedented levels in 2007, and the trend isn't expected to turn around anytime soon as hackers stay a step ahead of security and laptops disappear with sensitive information.
And while companies, government agencies, schools and other institutions are spending more to protect ever-increasing volumes of data with more sophisticated firewalls and encryption, the investment often is too little too late.
"More of them are experiencing data breaches, and they're responding to them in a reactive way, rather than proactively looking at the company's security and seeing where the holes might be," said Linda Foley, who founded the San Diego-based Identity Theft Resource Center after becoming an identity theft victim herself.
Identity Theft Cartoon
December 27th, 2007
Brought to us by the The Canadian Privacy Law Blog

Birmingham woman indicted for identity theft and bank fraud
December 27th, 2007
NBC News 13 is reporting that A Birmingham woman has been indicted for aggravated identity theft and bank fraud.
Tiffany Wedgeworth, a/k/a Tiffany Lewis, 25, was charged in U.S. District Court today.
Wedgeworth is specifically charged with three counts of bank fraud, and three counts of
aggravated identity theft. The penalty for bank fraud is not more than thirty years in prison, fines
3 charged in million-dollar credit card scam
December 19th, 2007
The Jersey Journal reports that Three Pakistani natives have been charged with running a multi-million dollar credit card scam out of phony perfume stores in Jersey City, Bayonne, North Bergen and outside Hudson County, officials said.
The small group sent part of the money it bilked from the companies to Pakistan and the FBI is working to determine if the money was sent to fund some nefarious activity such as terrorism, officials said.
Hudson County Prosecutor Edward DeFazio cautioned that "There is no connection, as of now, to any particular group or organization. It could be it was just sent over there to be used for personal purposes in the future -- but the FBI is investigating."
Internet Privacy: No Big Deal?
December 18th, 2007
Despite warnings, users continue to post personal information on the Web
Dark Reading reports that Most Internet users aren't particularly worried about how much information about them is available online, and many continue to post their personal data despite the risk of identity theft.
These are two of the conclusions drawn by a study published yesterday by the Pew Internet Project, which interviewed 1,623 Web users from a pool of 2,373 adults.
In the study, 60 percent of Internet users said they are not worried about how much information is available about them online. Only 38 percent of users say they have taken steps to limit the amount of online information that is available about them.
Roughly one third of Internet users say their email address, home address, home phone number, or employer is available on the Web. A quarter of Internet users say photos, names of groups they belong to, or signed things they have written appear online.
Disney, Home Depot Get Poor Privacy Marks
December 18th, 2007
Ralph Lauren is among the best, public interest group says
Dark Reading reports that If you're looking for some help in writing or rewriting your company's privacy policy, take a close look at the latest report from CyberStreetSmart.org, a service of the New York Public Interest Research Group.
The report offers a concise, yet comprehensive list of dos and don'ts for writing privacy policy, giving specific examples from the retail industry in the form of "Screen Door Awards" for poor policy and "Steel Door Awards" for well-chosen policy language.
Disneyshopping.com received a Screen Door for its privacy policy, because its language is "very technical and lengthy" and may be hard for people to understand, according to the report.
Homedepot.com was awarded a Screen Door because its policy says personal information may be transferred if the company is sold.
Company Will Pay $50,000 Penalty for Tossing Consumers’ Credit Report Information in Unsecured Dumpster
December 18th, 2007
Reports from the FTC claim A mortgage company that left loan documents with consumers’ sensitive personal and financial information in and around an unsecured dumpster has agreed to settle Federal Trade Commission charges that it violated federal regulations. The FTC’s complaint alleges that Northbrook, Illinois-based American United Mortgage Company violated the Disposal, Safeguards, and Privacy rules by failing to properly dispose of credit reports or information taken from credit reports, failing to develop or implement reasonable safeguards to protect customer information, and not providing customers with privacy notices.
“Every business, whether large or small, must take reasonable and appropriate measures to protect sensitive consumer information, from acquisition to disposal,” FTC Chairman Deborah Platt Majoras said. “This agency will continue to prosecute companies that fail to fulfill their legal responsibility to protect consumers’ personal information.”
Data on 3M UK Drivers \'Lost in Iowa\'
December 17th, 2007
Misplaced hard drive adds to furor over lost tax data
Dark Reading reports that The British government's IT security woes got deeper today when Transport Secretary Ruth Kelly reported to Parliament that the personal data of some 3 million U.K. drivers has been lost by a contractor in Iowa.
The administration has already been in hot water for most of the month, following the loss of as many as eight CDs containing the personal information of some 25 million taxpayers and family members. (See UK Government in Uproar Following Data Loss.)
In a statement before Parliament earlier today, Chancellor Alistair Darling told British legislators that the government has made little progress in finding the missing CDs, according to reports. Then Transport Secretary Kelly stepped to the microphone.
PayPal, E-payments Gain Online Ground
December 12th, 2007
Internet-based payment services are growing in popularity, as PayPal and others capitalize on fear of identity theft and payment fraud
Businessweek reports Burt Reynolds is an unlikely choice for the role of Santa's helper. That didn't stop computer maker Dell from casting the actor in a series of commercials aimed at the social-networking set.
In the videos, launched last month, Reynolds encourages viewers to buy Dell products online as holiday gifts for friends and family.
The star of "Smokey and the Bandit" and "The Cannonball Run" isn't the only surprising casting choice. Playing the part of payment collector is eBay's PayPal. Dell typically lets customers purchase computers with their Visa or MasterCard credit cards. But with this new service, all payments go through a PayPal account.
\'ID THIEF\' BRAT\'S TRAIL OF BIZARRO TALL TALES
December 6th, 2007
The New York Post reports about The buxom brunette who made up half of the alleged rich-kid identity-theft duo is no stranger to lying, cheating or stealing, her acquaintances say.
Jet-set jive-talker Jocelyn Kirsch, 22, who surrendered to Philadelphia cops yesterday on a slew of fraud charges, confounded many with her bizarre behavior growing up in Winston-Salem, NC, friends said.
Columbia Doctors at Risk For Identity Theft
November 21st, 2007
The New York Sun reports that Nearly 1,000 Columbia University physicians are at risk for identity theft after a security breach in which the insurance carrier, UnitedHealthcare, posted their tax identification numbers online.
The error occurred earlier this month, during the pre-enrollment period for a health plan offered to Columbia employees. When the company uploaded a list of in-network providers, it included the physicians' tax identification numbers, and in some cases, their Social Security numbers.
According to United, the Web site was accessed 157 times.
Yesterday, both Columbia and United said they took immediate action to resolve the breach.
The Identity Theft Resource Center Releases Identity Theft: The Aftermath 2006
November 19th, 2007
The Identity Theft Resource Center® released an important report today discussing the impact of identity theft victimization. This report was not based on a census survey but rather one that invited confirmed victims of identity theft in 2006 to respond to a series of 44 questions. These ranged from the emotional impact this crime has had on their lives and their ability to recover their good name to the financial loss to the business community in goods and services.
It also should be noted that reported time periods were given at the time victims responded to the survey. The Aftermath 2006 does not distinguish between those who are still being affected from those who are not. Thus, certain measures of victimization represent conservative estimates since the assessment was limited to the ending date of the study.
The following are highlights of The Aftermath 2006 study. Tables and additional data can be found in the full report on the website.
Detectives Looking For Victims of Identity Theft
November 18th, 2007
CBS 13 Sacramento reports that Two suspects in an identity theft ring have been arrested, and now Riverbank Sheriff's Detectives are hoping to identify their victims.
According to the Stanislaus County Sheriff's Department, detectives were investigating the source of a fraudulent check cashed at a local Target store, when they recognized the suspect on surveillance footage as Jimmy Newell.
Seventeen Indicted For Cybercrime And ID Theft In New York
November 9th, 2007
InformationWeek reports that Seventeen people and one corporation have been charged with trafficking in stolen credit cards, cybercrime, and identity theft, Manhattan District Attorney Robert M. Morgenthau said.
Three of the defendants -- Vadim Vassilenko, Yelena Barysheva, and John Washington -- were arraigned the day of the announcement. Six of them -- Tetyana Goloborodko, Douglas Latta, Angela Perez, Kostas Kapsis, Lyndon Roach, and Keith Cummings -- were arraigned previously. Two of them -- Eduard Kholstinin and Oleksiy Yarne -- are in custody in other states on unrelated charges. And six others are still being sought by authorities.
Western Express International, formerly headquartered in Manhattan, also was indicted. Vadim Vassilenko and Yelena Barysheva served as corporate officers for the company.
Wednesday's indictment arises from an earlier investigation and indictment of Western Express in February 2006. Vadim Vassilenko and Yelena Barysheva pleaded guilty to charges in that case and both are serving sentences in state prison.
NOW, A WAY TO STOP ID THEFT
November 6th, 2007
The Red Tape Chronicles reports that For the first time, everyone in America can now do something to prevent identity theft. Read on and I’ll show you how.
On Nov. 1, the nation's three credit bureaus gave all U.S. consumers the ability to shut down access to their credit reports, making it almost impossible for a stranger to get the data needed to commit financial identity theft. The process is called a security freeze.
The change was not really voluntary. The credit bureaus battled with state legislators for nearly four years to avoid making the freezes available to consumers. But after 39 states passed security freeze laws of one kind or another, the industry decided earlier this year to make the option available to everyone. But there's a catch.
Identity Theft Continues To Increase
October 16th, 2007
CBS News reports that The FBI calls it "the fastest growing white-collar crime in America."
It’s identity theft and it can happen to anyone, even celebrities. Oprah Winfrey, Steven Spielberg, and Tiger Woods, all of whom have had their identities stolen.
When she first reported on the story for 60 Minutes, CBS News Correspondent Lesley Stahl interviewed Mary Zupanc, then a staff doctor at the Mayo Clinic in Rochester, Minn. Zupanc's identity was stolen by a ring of thieves in New York.
Although she has not lost much financially, the theft has taken its toll on her emotionally, Stahl reported Tuesday night for 60 Minutes II.
Schwarzenegger says \'Hasta la vista\' to bill on data breach costs
October 15th, 2007
Computerworld is reporting that In a move that is likely to come as a major relief to retailers nationwide, California Gov. Arnold Schwarzenegger on Saturday vetoed legislation that would have made merchants in his state financially liable for the costs incurred by financial institutions because of retail data breaches.
In a statement explaining his reasons for refusing to sign the bill, formally known as AB 779, Schwarzenegger said that it "attempts to legislate in an area where the marketplace has already assigned responsibilities and liabilities that provide for the protection of consumers."
The measure, which was approved last month by both the California State Assembly and Senate, would have required retailers in California that get hit by data breaches to reimburse banks and credit unions for the cost of alerting customers and reissuing credit and debit cards. It would also have prohibited merchants from storing specific types of authentication data taken from the magnetic stripes on the back of payment cards, while requiring the use of so-called strong authentication technologies for protecting cardholder data.
San Antonio one of the worst cities for identity theft
October 4th, 2007
The San Antonio Business Journal is reporting that San Antonio has been ranked the 10th highest city in the United States for identity theft, according to the Identity Theft Resource Center and pen maker uni-ball pens.
Phoenix is the No. 1 city in America for identity theft, followed by Riverside, Calif.; Las Vegas; Miami; Dallas; Sacramento; San Francisco; Los Angeles; Houston and the Alamo City.
This results come at a time when less than 25 percent of Americans nationwide are taking the proper steps to protect themselves.
ID theft victims, retailers split on bill
October 3rd, 2007
The Los Angeles Times reports that Stanley Greene of Orange was at his home computer, making a mortgage payment, when he noticed an unfamiliar $300 debit from the couple's checking account.
Merrilee, his wife, said she knew nothing about the purchase.
"While we were talking, it happened again," she recalled. "Another debit came through on the computer and another and another one. . . . Our checking account was compromised. They drained all of our funds . . . in a matter of days."
The Greenes soon realized that they'd been the victims of identification theft and credit card fraud. On Monday, they joined others whose lives were turned upside down by computer hackers to lobby for a bill that would force retailers and financial institutions to adopt national standards to protect shoppers' financial data they disclose.
Powerful business lobbies oppose the proposal as unneeded and say that passage could unleash a wave of expensive lawsuits against stores.
Oregon identity theft law takes effect
October 2nd, 2007
The Register-Guard reports that Starting Monday, Oregonians have the right to put a freeze on their credit ratings if their identity has been stolen, and businesses were ordered to notify consumers if their personal information has been subject to a security breach.
Both provisions were part of an identity theft bill passed last spring by the Legislature.
Elements of the bill take effect over the next three-month period, starting Monday.
Identity theft or a breach in the protection of personal information can result in the opening of bogus credit accounts, which are used to make purchases.
Wayne County employee charged in huge identity theft case
October 2nd, 2007
The Detroit Free Press reports that Wayne County Sheriff Warren Evans is holding a press conference this afternoon to announce charges against a former county employee accused of identity theft.
Evans aid the suspect had been a manager in the county?s office of management and budget and had been sharing county employees? personal information.
There were at least 39 victims in the scheme, Evans said in a press released.
Wayne County Prosecutor Kym Worthy is also scheduled to attend the 2:30 p.m. press conference at the sheriff?s office in Detroit.
Canada to criminalize identity theft
October 2nd, 2007
The Globeandmail.com is reporting that The Canadian government plans to criminalize identity theft to give police the ability to stop such activity before any fraud has actually been carried out, Justice Minister Rob Nicholson said Tuesday.
He said he would introduce legislation targeting the actual gathering and trafficking in credit card, banking and other personal data for the purposes of using it deceptively.
Identity fraud is already a crime in Canada, but gathering and trafficking in identity information generally is not.
“Our government will be giving police the tools to better protect Canadians by stopping identity theft activity before the damage is done,” Nicholson said in a statement.
NY Mayor Bloomberg Target of Identity Theft: DA
October 2nd, 2007
CNBC is reporting that New York City Mayor Michael Bloomberg was the victim of identity theft, according to the New York County District Attorney's office.
The Manhattan DA's office said in a release Tuesday it charged two men with stealing funds from the mayor's personal financial accounts.
Officials charged Charles Nelson with grand larceny and identity theft, alleging that Nelson stole $10,000 from one of Bloomberg's personal accounts on May 11. Nelson's theft was discovered after Nelson attempted to transfer the money from the mayor's Bank of America account to his own E*Trade account, authorities said.
The War on Fraud
October 2nd, 2007
Founded and run by Israeli intelligence specialists, Fraud Sciences is helping online retailers distinguish legitimate charges from fraudulent ones
BusinessWeek reports that Cybercriminals are working overtime getting ready for the busy Christmas season, when online shopping is at its peak. But this year, Internet merchants stand a better chance of weeding out fraudulent buyers thanks to technology developed by a startup called Fraud Sciences. Even better, hundreds of online retailers in the U.S. and elsewhere already using the startup's screening system will be able to accept with confidence orders they might previously have rejected as suspicious—a boon to their top line.
For Tel Aviv-based Fraud Sciences, the opportunity looks limitless. Last year, online purchases charged to stolen or illegitimate credit cards cost merchants an estimated $3 billion in the U.S. alone. Many believe the actual cost is much higher. Fraud Sciences' proprietary technology tackles the problem by helping merchants verify the identity of buyers. That, in turn, makes merchants more willing to accept orders, especially from overseas.
Family swept into ID theft scheme
October 1st, 2007
The Herald Tribune Reports that Minutes after a credit card company called a Bradenton family to report suspicious purchases, another company called the same family to thank them for applying for a new card.
The family immediately suspected an identity theft scam, since they did not have ties to either company.
Phone calls from credit card representatives continued for the next two weeks.
Manatee County sheriff's detectives say the identity thieves submitted credit card applications fraudulently on the Internet using the family's name, and are now also trying to get mortgage loans
Kevin Truluck, \'Identity Theft King\'
October 1st, 2007
The Philadelphia Daily News is reporting that KEVIN TRULUCK, dubbed the "Identity Theft King" after scamming victims in the Camden-Philadelphia area for 22 years, died of cancer Sept. 17 at the Federal Prison Hospital in Butner, N.C.
The 51-year-old Truluck recently told associates he had made the "big time" after being snared by the FBI and Postal Inspection Service, and sitting in the Federal Detention Center.
"He loves the limelight. He loves the attention," said Postal Inspector Brian Shannon, who, with FBI agent Tracy Heylmann, now retired, put Truluck behind bars.
"This is bigger than his state case. It gave him status in jail. He is intelligent, but misguided for the most part."
After years of trying to catch him, Truluck became legendary among South Jersey law-enforcement officers for never staying in one place long enough to be arrested.
On June 30, U.S. District Judge Joseph E. Irenas in Camden sentenced Truluck to a 10-year sentence and ordered him to pay $451,755 in restitution.
Mansfield man faces 20 years for identity theft
September 30th, 2007
The Star-Telegram.com reprts that A Beaumont woman's credit was ruined after Marten Casarez used her name, obtained from patient records stolen from a Hurst dentist, to run up charges on her credit cards.
A Dallas woman spent months straightening out her credit after Casarez used her stolen mail to set up a FedEx account in her name and used credit cards to pay for hotel bills and other items.
During a sentencing hearing Friday, nine witnesses described how Casarez destroyed their credit -- and their lives.
Casarez, 22, of Mansfield, took the identities of more than 1,000 people from 33 states and obtained at least $334,000 using credit cards and bank account numbers, prosecutors said.
He also set up a $240,000 line of credit using a woman's name.
As part of his schemes, Casarez impersonated ministers, doctors, lawyers, police officers and private investigators.
FBI: Identity theft still relies on paper, phones
September 29th, 2007
Surburban Journals reports that Despite the influx of computers and new technology in recent decades, identity theft is still driven by decidedly rudimentary devices -- phones and rummaging through papers being the most common -- a group of speakers told Madison County law enforcement and business leaders Tuesday.
"The Internet is growing, but it's not the primary source," said Christopher Trifiletti, a FBI special agent in charge of identity theft protection, during a breakfast meeting on ID theft organized by the state's attorney office.
Trifiletti, who works out of the FBI's Fairview Heights office, said 28 percent of stolen identities can be traced back to a lost or stolen wallet that crooks use to open bank accounts, tap into credit cards or even sign car leases.
Identity theft, protection to be discussed at Borders
September 29th, 2007
The Daily Pilot reports that A former FBI special agent and NASA engineer will discuss and sign copies of his book, “The Identity Theft Survival Guide,” at 1 p.m. Oct. 6 at Borders at South Coast Plaza.
R.M. Tracy is the owner of the Privacy Trust Group, an ID theft prevention and advocacy organization.
Tracy is also a national speaker and regular guest on the Greenstone radio network.
“The Identity Theft Survival Guide” explains the steps to recovering from identity theft. The book describes how to repair credit and prevent future theft.
Tracy also wrote “Consumers’ Guide to Privacy: Regaining your Privacy” and “Reduce Your Risk of Credit Fraud and Identity Theft.”
Identity theft affects about 10 million U.S. consumers each year, according to the Federal Trade Commission.
Victims in laptop theft urged to monitor credit
September 29th, 2007
The Advocate reports that Betty Ann Obringer, a lifetime resident of Norwalk who works as an executive secretary at a local bank, said she never banks online. She prefers to go to her local branch.
So when she got a letter from the state's Department of Revenue Services warning that her personal information might have been stored on a laptop stolen last month from the car of an employee, she was not sure what she should do.
"I'm very cautious usually," she said. "It's very scary to think that your identity is going to be stolen."
Last night, she attended a seminar sponsored by the state's Consumer Protection Agency, where she heard representatives from that department, as well as the departments of Public Safety, Revenue Services and Banking, give advice on guarding against identity theft and protecting credit.
SCV\'s Anti-ID Theft Program Is Tops
September 29th, 2007
The Signal News for the Santa Clarita Valley is reporting that Fraud and identity theft are crimes that indiscriminately target victims, the effects of which remain for years.
But residents do have the means to protect themselves from becoming victims, and for the past year the Fraud and Identity Theft Education Program has worked with local residents, teaching them ways to reduce the number of identity theft crimes in Santa Clarita.
For its work, the city of Santa Clarita and Santa Clarita Valley Sheriff's Station's FITE Program was recently named the Crime Prevention Program of the Year by the California Crime Prevention Officer's Association.
The program partners with the city and the Santa Clarita Chamber of Commerce to educate residents, seniors and businesses about identity theft and fraud - one of the least obvious and most serious of crimes.
Identity theft is non-violent form of terror
September 28th, 2007
The Times and Democrat.com reports that Identity theft and falsification was a factor in the nation's worst day, Sept. 11, 2001, when 3,000 Americans died in terrorist attacks. Preventing a repeat has become a national priority.
It also is now a top individual priority for every American. If robbery and theft from a store, bank or home was once the crime of choice, it is today stealing a person's identity and profiting.
With so much personal information available through a variety of means, the number of incidents involving theft utilizing the virtual world has increased dramatically. Combine that growing number of incidents with a general lack of public knowledge on how identity thefts occur and you have a growing problem.
Are you a victim? Not really sure? Unless you check your credit report annually, shred anything and everything containing personal information, and automatically delete e-mails from unknown senders, the answer is: You might be.
Guilty Plea in Identity Theft and Fraud Ring
September 27th, 2007
TechNews is reporting that ROMAN KARELOV, 19, of Baltimore, Maryland, pleaded guilty today before United States District Judge William B. Shubb in Sacramento to conspiracy to transport goods obtained by fraud, in connection with his participation in a scheme to defraud businesses in the United States by purchasing items with stolen identity information and sending the goods to confederates in Russia. KARELOV is the second Russian citizen convicted in the case.
The case is being investigated by the Federal Bureau of Investigation and the Davis Police Department, with the assistance of the United States Secret Service, the United States Postal Inspection Service, the United States Immigration and Customs Enforcement, and other agencies.
According to Assistant United States Attorney Benjamin B. Wagner, who is prosecuting the case, KARELOV in his plea of guilty admitted that in May 2006, he was issued a temporary visa to work and study in the United States, and that before leaving Russia he was recruited by co-defendant ALEKSEY CHUGAEV, 25, to participate in the scheme to defraud U.S. businesses. After arriving in the United States and settling in Baltimore, Maryland, KARELOV communicated with CHUGAEV through email, ICQ chat rooms, and cell phone. CHUGAEV used stolen identities and credit information to make Internet purchases of laptop computers, jewelry, gift cards, travelers checks, and other items from U.S. businesses, and to have them shipped to various addresses in the Baltimore area controlled by KARELOV. Pursuant to instructions from CHUGAEV, KARELOV then repackaged the items and sent them to addresses in Russia controlled by CHUGAEV. KARELOV also opened bank accounts into which he deposited cash obtained from debit cards purchased with stolen identities, and facilitated the transfer of such funds to CHUGAEV in Russia. KARELOV knew that CHUGAEV was also working with other participants in the scheme who were located in the United States. In his plea agreement, KARELOV admitted to causing between $200,000 and $400,000 in losses to U.S. victims.
Citi sends unrequested credit cards
September 27th, 2007
USAToday reports that Citi (C), the nation's largest bank, is issuing 3.5 million credit cards to department store customers who didn't request them — a step that consumer groups say raises privacy concerns and could expose consumers to identity theft.
This month, Citi is sending general-purpose MasterCards to Macy's (M) customers with credit card accounts that have been inactive for two to four years. Citi bought those credit card accounts last year.
Citi and Macy's describe the new cards as a way to "replace" inactive Macy's accounts. But the new Citibank MasterCards aren't Macy's branded; they can be used anywhere MasterCard is accepted. Macy's cards can be used only in-store.
The Worm That Roared
September 27th, 2007
Time in partnership with CNN reports that During the week of Jan. 15, an innocuous-looking e-mail appeared in thousands of inboxes around the world. Its subject line read, "230 dead as storm batters Europe." The e-mail came with a file attached, bearing a plausible-sounding name like Full Story.exe or Read More.exe. Plenty of people clicked on it. After all, storms really were battering Europe at the time; that week high winds and rain had killed 14 in the U.K. alone. But all great cons have a grain of truth in them somewhere.
The file that arrived with the e-mail was, of course, a computer virus, immediately christened the Storm Worm by the Finnish computer security firm F-Secure, which was among the first to spot it. Since then, the Storm Worm has proved remarkably hard to kill. Nine months later, it's still out there, infecting something like a million computers worldwide. It's not the most damaging virus in history, but it may be the most sophisticated. Whoever created it is to viruses what Michelangelo was to ceilings.
The Storm Worm is a marvel of social engineering. Its subject line changes constantly. Whoever produced it--and its many later variants--has a lively feel for the seductive come-on and a thorough grounding in human nature. It preys on shock ("Saddam Hussein Alive!") and outrage ("A killer at 11, he's free at 21 and ...") and prurience ("Naked teens attack home director") and romance ("You Asked Me Why"). It mutates at a ferocious rate, constantly changing its size and tactics to evade virus filters, and finds evolving ways to exploit other online media like blogs and bulletin boards. Newer versions might contain, instead of a file, a single link to a fake YouTube page, which crashes your browser while quietly slipping the virus into your computer. "I've heard people talk about this like virus 2.0, just like people talk about Web 2.0, because it's so different from the traditional attacks," says Mikko Hypponen, chief research officer of F-Secure. "It's probably the largest collection of infected machines we've ever seen."
Man arrested in identity theft
September 27th, 2007
azcentral.com is reporting that A suspected undocumented immigrant was arrested Wednesday on suspicion of using a fraudulent Social Security card to buy five vehicles and get a job in Mesa.
Angel Santamaria Vences, 26, was arrested on suspicion of taking the identity of another and forgery with a written instrument, according to police records.
In July, Police received a report of identity theft from a man in California who claimed his Social Security number had been stolen.
According to records, an investigation determined the number was used to get a job and buy a car at a local dealership. Records also show Vences admitted to using the victim's Social Security number to buy four vehicles in the past.
Police said Vences, a Mexican citizen, admitted to buying a fake Social Security card and resident alien card several years ago, after his Temporary Visitors' Visa expired.
Vences did not know the victim and did not have permission to use his Social Security number, according to police.
Fraud Cops are Swamped
September 26th, 2007
Financial institutions are asking law enforcement and regulators to share more data to better combat fraud.
PC World is reporting that Fraud investigators are struggling to cope with vast quantities of data sent to them by financial institutions, meaning some crimes may go uninvestigated or even unnoticed, experts said on Wednesday.
The issue is prompting banks and other financial institutions to ask law enforcement and regulators to share with them more of the data they have about suspicious transactions, in order to better combat fraud.
Banks and transfer agencies are required by regulators in the U.S. and the U.K. to file reports when they detect a potentially illegal transaction, said Olga Maitland, head of the International Association of Money Transfer Networks, at the Fraud World 2007 conference in London.
Police Search for Identity Theft Suspect
September 25th, 2007
NEWS 8 KFMB cbs8.com reports that San Diego police are asking the public's help in finding a man wanted for identity theft.
Police said the man used a stolen credit card to rack up thousands of dollars in purchases across southern California, including eight local businesses.
Anyone with information is asked to call Crime Stoppers at (888) 580-TIPS.
Arizona leading state in nation for identity theft
September 24th, 2007
KVOA Tuscon reports that Arizona is the number one in the nation, recording the highest number of identity theft cases.
Gary Payne says someone stole almost $4,000 out of his bank account, withdrawing money from ATM's in Argentina.
"I was really scared because I didn't know how I was going to take care of this. It was a real problem. All of a sudden, all your cash is gone," Payne said.
So he fell months behind on his payments.
"They had taken all the money out and I basically couldn't pay for anything," Payne said.
City: Stolen computers held personal information on 3,500 people
September 21st, 2007
Cleveland.com reports COLUMBUS, Ohio (AP) — The city has offered identity-theft protection services to more than 3,500 people whose names, addresses and Social Security numbers were on three computers stolen from a warehouse.
The theft affected people who had signed up for the city's Mobile Tool Library, which lends hammers, power tools, lawn mowers and other supplies, said Deputy Development Director Greg Davies.
Information on the computers was password-protected, making it difficult for thieves to gain access to the names and Social Security numbers, Davies said. The city is considering whether to stop collecting Social Security numbers for the program, he said.
Texas Health Resources says worker had access to 8,000 patients\' data
September 21st, 2007
The Dallas Morning News has reported that Texas Health Resources, North Texas' largest hospital system, has sent letters to 8,000 patients after discovering an employee misused one patient's credit card information.
That patient's daughter called THR's compliance hotline Sept. 5 with concerns about credit card charges on the man's bill.
The company traced the problem back to a temporary worker in its Garland office that handles patient billing. The female worker was terminated the following day and arrested on Sept. 14, according to a THR spokesman.
Garland officials identified the woman as Kristina Renee Garcia, 31, of Garland, who has been charged with two counts of credit card abuse, one count of forgery, and fraudulent identity theft.
Mortgage data leaked over file network
September 21st, 2007
MSNBC reports NEW YORK - Three spreadsheets containing more than 5,000 Social Security numbers and other personal details about customers of ABN Amro Mortgage Group were inadvertently leaked over an online file-sharing network by a former employee.
Tiversa Inc., a Pittsburgh company that offers data-leakage protection services, traced the origins of the ABN data to a Florida computer with the BearShare software installed.
BearShare, LimeWire and scores of other programs are designed to distribute and find songs, movies and other files over the Gnutella file-sharing network.
Tiversa Chief Executive Robert Boback said file-sharing programs are commonly misconfigured to share documents their owners never intended to make public.
Five Tucsonans accused of identity theft, bank fraud
September 20th, 2007
Fox11az.com reports that Five Tucson individuals face up to 30 years behind bars after being indicted on multiple charges involving identity theft and bank fraud.
A 30-count indictment was unsealed on September 20, in which three former employees of Arizona Honda are accused of theft of personal identifying information of individuals, the creation of counterfeit and unauthorized access devices using the stole information, and the use of personal information to commit bank and credit card fraud.
According to a media release, Anthony Blas Rivera, Michael De La Rosa and Joshua Damian Luna were salesmen at Arizona Honda. They are accused of using information provided by potential customers, including name, date of birth and social security number, to unlawfully apply for and obtain credit cards.
Investigators: VA still not protecting against identity theft
September 19th, 2007
Everything Alabama al.com reports from WASHINGTON (AP) — that Veterans' personal data and health information remain at risk of identity theft because the Veterans Affairs Department has yet to implement several safety measures, government investigators say.
The report by the Government Accountability Office, released Wednesday, comes more than one year after the VA pledged renewed security efforts after the loss of personal information for 26.5 million veterans and active-duty personnel.
It found that the VA had not yet fully secured access to its computer network and department facilities nor worked to ensure that only authorized changes and updates to VA computer programs were made.
GAO: Vets at risk of identity theft
September 19th, 2007
Wkyc.com is reporting that WASHINGTON (AP) --
More than year after an identity-theft scare affecting America's veterans, government investigators say the Veterans Affairs Department hasn't done enough to protect vital data.
The Government Accountability Office says veterans' personal data and health information are still at risk of being stolen because the VA has yet to implement several safety measures.
The report found the VA has not yet fully secured access to its computer network and department facilities. Nor has it worked to ensure that only authorized changes and updates to VA computer
programs are made.
In May 2006, the VA stunned the veterans community when it announced that thieves had stolen a computer hard drive containing
millions of names, Social Security numbers and birth dates. The hard drive was eventually recovered intact.
Identity Theft Initiatives, FTC Testifies
September 19th, 2007
Technewsdaily.com reports that The FTC today told the Maryland Task Force on Identity Theft that public organizations, including federal, state, and local governments, “play a critical role in guarding against misuse and unauthorized disclosure of the personal information they collect and maintain.”
Speaking before the Maryland Task Force to Study Identity Theft, Betsy Broder, Assistant Director of the FTC’s Division of Privacy and Identity Protection said, “To succeed in the battle against identity theft, federal, state and local governments, working together with the private sector, must make it more difficult for thieves to obtain the information they need to steal identities, make it more difficult to use that information if they do obtain it, and assist victims when thefts occur.” The Maryland Task Force was established in 2005 to study the problems associated with identity theft in Maryland, consult with various entities, including the FTC, survey state agencies for compliance with laws regarding uses of Social Security numbers, and make recommendations for possible remedies to identity theft.
Connecticut Says Data on Its Money Was Stolen
September 17th, 2007
As reported by the New York Times Calling it an “unfathomable” breach of security, Gov. M. Jodi Rell of Connecticut said yesterday that a computer backup tape stolen in June from a car in Ohio contained bank account and other sensitive financial data for nearly all Connecticut state agencies.
The governor criticized Connecticut’s attorney general and comptroller for not telling her about the situation earlier. But the comptroller’s office said it only recently learned of the breach, and notified the governor’s office a week ago. The attorney general said he had not known the extent of the problem.
The tape was stolen from the car of an intern working on a computer project for the State of Ohio. Besides the Connecticut state data, the tape contained the names and Social Security numbers of 57 Connecticut residents. The tape held similar data for about 1.3 million Ohio residents. It was unclear if it contained information from other states.
Connecticut and Ohio hired the same consulting firm, Accenture, to develop computer systems integrating payroll, accounting, personnel and other fiscal functions. Rich Harris, a spokesman for Governor Rell, said yesterday that Accenture seemed to have used the program it created for Connecticut as a template for its project in Ohio, “and it’s our understanding that this is how the data got mixed up” on the tape.
Leader in TJX Fraud Gets 5-Year Sentence
September 14th, 2007
The Wall Street Journal reports that Irving Escobar, a ring leader in a TJX Cos.-linked credit-card fraud, was sentenced to five years in prison and has been ordered to pay nearly $600,000 in restitution for damages resulting from stolen financial information, Florida officials said.
The sentencing follows a guilty plea by Mr. Escobar, 19 years old, of Miami, to charges that he participated in a 10-person operation that used counterfeit cards bearing the stolen credit-card data of hundreds of TJX customers to purchase approximately $3 million in goods and gift cards. The penalty is the stiffest handed down so far in the case.
The thefts were carried out at a string of Wal-Mart and Sam's Club stores in Florida during the second half of 2006, authorities said. Some of the merchandise was bought with gift cards that had previously been purchased with the fraudulent credit cards, a modern-day version of money laundering, officials said.
Tax Chief Away As Crisis Mounted
September 13th, 2007
The Courant.com reparted that State Rep. Christopher Donovan, the House majority leader, had been wondering where the state tax commissioner has been since he and 106,000 other Connecticut taxpayers were notified that their names and Social Security numbers were on a laptop computer stolen from a tax department employee's car on Long Island.
On Wednesday, Donovan got an answer.
As taxpayers fretted about identity theft, Law was in Washington, D.C., for two days last week at the annual conference of the Northeastern States Tax Officials Association. The meeting at the Grand Hyatt Washington Hotel covered more than 15 different tax topics, including a presentation titled, "Are you smarter than a tax commissioner?"
The conference agenda included a martini reception and a dinner described as "an evening of elegance" at a high-profile Georgetown restaurant.
Donovan was not impressed.
"I'm wondering if she was giving a talk on lost Social Security numbers," Donovan said after being told by The Courant about the conference.
Credit card scam hits Lower Cape
September 13th, 2007
From Orleans, MA - The Cape Codder reports that Police are asking the public
Iceman Hacker Indicted for Running Identity Theft Scheme
September 11th, 2007
InformatonWeek.com reports that A California man was indicted by a grand jury Tuesday for allegedly running an online identity theft scheme that nabbed "tens of thousands" of credit card numbers.
Max Ray Butler, 35, of San Francisco, was arrested in San Francisco on Sept. 5 on a criminal complaint filed in Pittsburgh. Tuesday's indictment leveled wire fraud and identity theft charges at him that carry a maximum of 40 years in prison and a fine of $1,500,000.
Butler, who also is allegedly known as names such as Iceman, Digits, Darkest, and Aphex, has been involved in what the government claims is a "large-scale criminal enterprise" focused on hacking into computer networks to steal and use or resell credit card and other personal information. In a 16-month investigation run by the U.S. Secret Service, investigators allegedly tied Butler to the Cardersmarket Web site, which he allegedly ran to help cohorts steal information and turn it into usable credit cards, according to the affidavit.
One co-conspirator told investigators he had received "tens of thousands" of illegally obtained credit card numbers from Butler, and regularly 1,000 or more numbers a month, according to the affidavit.
Identity theft convict sentenced to 30 years
September 8th, 2007
The Honolulu Star Bulletin reported that A Honolulu man was sentenced to 30 years in prison for stealing the identity and land belonging to Kauai businessman John Elwin, who was found killed in the Philippines in 2006.
Circuit Judge Michael Town granted the state's motion yesterday to have Henry Ponce Jacinto Calucag Jr. serve a 20-year term for first-degree identity theft, then a 10-year term for using a computer in the commission of a separate crime.
Calucag, 58, also known as Hank Jacinto, was also ordered to serve a mandatory minimum term of six years and eight months as a repeat offender.
Calling Elwin, 51, "an all-around good guy," Town said the series of crimes that Calucag perpetuated "makes no sense whatsoever."
Portland detectives arrest two in identity theft at carwash
September 7th, 2007
The Oregonian reports that Portland detectives today arrested anidentity theft suspect, believed to be part of a crime ring with as many as eight members across Oregon and Washington.
The ring stole credit card numbers from patrons at a carwash on Northeast 82nd Avenue and Glisan Street, Detective Dave Dobler said. Then the numbers were used to charge more than $30,000 in purchases.
Joanna Clark, 33, was arrested on accusations of identity theft, forgery, fraudulent use of a credit card and first-degree theft. Another resident of the Portland house, Donald Gilbert, 35, was arrested on accusations of possessing 28 adult marijuana plants and 1.5 pounds of marijuana
Clark allegedly was connected to an operation including a car wash
ID thieves hit Monster.com
September 6th, 2007
The Capital Times reports that Users of the online recruiting site Monster.com should beware because hackers have obtained information from 1.3 million registered job seekers and are using those details to ask for personal financial data, state officials say.
Janet Jenkins of the Wisconsin Office of Privacy Protection also warns that the scammers are encouraging Monster.com customers to download a tool called "Monster Job Seeker," a malicious program that harms the user's PC and may encrypt the user's data.
Everyone who has entered information on Monster.com or its affiliate USAJOBS.com is at risk, according to Jenkins.
Consumers receiving any e-mail from Monster.com should send an e-mail to siteabuse@monster.com to confirm its legitimacy. They should also be suspicious of any e-mail with requests for personal financial information. Scammers typically ask for usernames, passwords, credit card numbers, Social Security numbers and date of birth.
Hopkins computer, data back
September 5th, 2007
As Reported by the BaltimoreSun.com When he saw weekend news reports that a computer containing the personal records of 5,783 cancer patients had been stolen from Johns Hopkins Hospital, attorney Michael Mastracci knew exactly where to find it.
"I knew about it weeks ago," he said of the computer. "Before I saw the news, I didn't know what was on the computer. But when I saw the stories, I knew immediately that that was the computer I'd heard about. "
By early Sunday afternoon, he had arranged to have the computer brought to his Catonsville law office. He called The Sun, which had reported the theft Saturday, to find out whom to contact at Hopkins to return the hottest desktop in town.
Third Data Breach In Three Months Revealed At Pfizer
September 5th, 2007
TheDay.com reports that The third data breach in the past three months at Pfizer Inc. came to light Tuesday, leading state Attorney General Richard Blumenthal to call for a criminal investigation of the incidents, the latest of which exposed an estimated 34,000 people to possible identity theft, about 5,500 from Connecticut.
Missouri AG Nixon Invites Consumers To Fight Identity Theft
September 4th, 2007
As Reported by the All American Patriot Central Missourians will have an opportunity to fight identity theft by shredding their unneeded confidential documents free of charge this Saturday (Sept. 8). Missouri Attorney General Jay Nixon, the Better Business Bureau and the U.S. Postal Inspection Service invite consumers to participate in Shred Day 2007 in Columbia between 9 a.m. and noon. The event will take place at the Reactor Field parking lot off of Providence Road, between Stadium and Nifong.
Hopkins reports theft of data
September 1st, 2007
The BaltimoreSun.com reports that A desktop computer containing the personal information of 5,783 patients was stolen from Johns Hopkins Hospital in mid-July, and the hospital waited more than five weeks to inform the patients or their families of the theft.
The computer, taken from an "administrative work area" in a building on Johns Hopkins' main campus the night of July 15, contained patients' names, Social Security numbers, birth dates, medical histories and other personal information, according to Hopkins officials. Another computer and a projector were also stolen.
Woman gets three years in identity theft case
August 31st, 2007
The Columbian reported An Everett woman who was arrested in Vancouver last year was sentenced Wednesday to almost three years in prison after being convicted on identity theft charges.
In addition, a U.S. District Court judge in Tacoma sentenced Sheree M. Carsen, 32, to three years of supervised release and ordered her to pay $7,500 in restitution.
The U.S. attorney's office in Seattle said Carsen and her then-boyfriend took personal information of various people from the trash cans at Kinko's copy centers and other locations and then used that information to open credit accounts.
Senate blocks mandatory ID implants in employees
August 31st, 2007
As reported in the Los Angeles Times Tackling a dilemma right out of a science fiction novel, the state Senate passed legislation Thursday that would bar employers from requiring workers to have identification devices implanted under their skin.
State Sen. Joe Simitian (D-Palo Alto) proposed the measure after at least one company began marketing radio frequency identification devices for use in humans.
The devices, as small as a grain of rice, can be used by employers to identify workers. A scanner passing over a body part implanted with one can instantly identify the person.
"RFID is a minor miracle, with all sorts of good uses," Simitian said. "But we shouldn't condone forced 'tagging' of humans. It's the ultimate invasion of privacy."
Elizabeth cop suspended after identity theft charge
August 23rd, 2007
The New Jersey Star Ledger reported A second-year Elizabeth cop has been charged with identity theft and suspended from duty after allegedly opening a credit card under someone else's name, authorities said.
Debra Bradley, 24, of Elizabeth, was arrested on July 31 and charged with forgery, credit card fraud, attempted theft and two counts of identity theft. She was immediately suspended without pay from her $60,000-a-year position and could face prison time if convicted of the offenses, authorities said.
Police and prosecutors would not elaborate on the nature of Bradley's crime and declined to say whose identity the officer stole. It is also unclear how many cards Bradley opened and whether they were ever used to make purchases or withdraw money.
Many Facebook Users Compromise Own Identities
August 20th, 2007
ConsumerAffairs.com reports Not all case of identity theft come from stolen notebook computers or vulnerable computer networks. Computer