Comment Re:I received the "We lost your data" letter ... (Score 1) 218
He should be replaced because he was the person responsible for the data. Obviously I don't want them encrypting irrelevant materials, but if it contains SSNs, then there is no question it should be encrypted. Thus the statement about "data classification". It's a very simple concept, look it up.
Two months is absolutely unreasonable. It should not be a complicated process to determine what's on the tapes (any halfway decent backup product contains a database of what materials are backed up to which media), and they obviously had the names/address information because that's part of what was backed up! Just because it takes a long time to go through red tape is not an excuse. While the Ohio government was going through their CYA process, citizens of that state were at a higher risk of identity theft and fraud due to their inaction.
There are others, but those are the ones pissing me off at the moment.
Two months is absolutely unreasonable. It should not be a complicated process to determine what's on the tapes (any halfway decent backup product contains a database of what materials are backed up to which media), and they obviously had the names/address information because that's part of what was backed up! Just because it takes a long time to go through red tape is not an excuse. While the Ohio government was going through their CYA process, citizens of that state were at a higher risk of identity theft and fraud due to their inaction.
There are others, but those are the ones pissing me off at the moment.
