"We're from the federal government. We're here to help you."
Federal Database Exposes Social Security Numbers
Article Tools Sponsored By
By RON NIXON
Published: April 20, 2007
WASHINGTON, April 20 — The Social Security numbers of tens of thousands of people who received loans or other financial assistance from two Agriculture Department programs were disclosed for years in a publicly available database, raising concerns about identity theft and other privacy violations.
Officials at the Agriculture Department and the Census Bureau, which maintains the database, were evidently unaware that the Social Security numbers were accessible in the database until they were notified last week by a farmer from Illinois, who stumbled across the database on the Internet.
“I was bored, and typed the name of my farm into Google to see what was out there,” said Marsha Bergmeier, president of Mohr Family Farms in Fairmount, Ill.
The first link that appeared in the search results was for her farm’s Web site. The second was for a site that she had never heard of, FedSpending.org, which provides a searchable database of federal government expenditures. The site uses information from the Census database.
Ms. Bergmeier said she was able to identify almost 30,000 records in the database that contained Social Security numbers.
“I was stunned,” she said. “The numbers were right there in plain view in this database that anyone can access.”
While there was no evidence to indicate whether anyone had in fact used the information improperly, officials at the Agriculture Department and the Census Bureau removed the Social Security numbers from the Census Web site last week.
Officials at the Agriculture Department said Social Security numbers were included in the public database because doing so was the common practice years ago when the database was first created, before online identity theft was as well-known a threat as it is today.
Department officials said that more recently, when government agencies began to review public databases to remove sensitive personal information like Social Security numbers, they failed to notice that the numbers were being used in this database.
Terri Teuber, a department spokeswoman, said the agency was notifying people whose Social Security numbers were disclosed on the site. She said the agency was also planning to contract with a company to monitor the credit reports of all the affected individuals, at an estimated cost of about $4 million.
“We took swift action when this was brought to our attention, and took the information down,” Ms. Teuber said. “We want to make sure that it doesn’t exist on any publicly available Web site.”
The Agriculture Department said that its review of the database shows that between 100,000 and 150,000 people could be at risk.
A spokeswoman for the Census Bureau referred all calls about the database to the Office of Management and Budget.
Privacy advocates say the actions by the agencies may not be enough. The database is more than two decades old, and is used by many federal and state agencies, by researchers, by journalists and by other private citizens to track government spending. Thousands of copies of the database exist.
( continues... )
nytimes.com
Uh, this isn't Rush Limbaugh. This is the NYT. |
