Never Fear, Doug Gansler's Here

[Miss Lead]

Found this quite by accident when googling "security breaches in MD" to see if the media is picking up anything more. This was the first "hit"

http://www.oag.state.md.us/idtheft/index.htm

I'd like to add a 9th tip to his list. Amazing that businesses in Maryland are required to report security breaches to his office. Just ...wow...

 

[CrazySanMan]

I like this part, especially in light of the 77R's

Don't give out your Social Security number unless it is absolutely necessary

 

[Mr H]

But... but.....

Nothing on the form says it's "OPTIONAL"!!!!!

oy, vey......

 

[Tomcat]

The Identity Theft Unit can give you step-by-step advice on how to protect yourself from ID thieves using, or continuing to use, your personal information. We may also be able to help you to address some of the issues that identity theft causes, such as dealing with credit card companies or collection agencies.
You may contact the Identity Theft Unit by calling (410) 576-6491 or by sending an e-mail to idtheft@oag.state.md.us.

Maybe we should call / email them for advise?

 

[Miss Lead]

I did just call. Seriously...voicemail picks up. "You've reached the Identity Theft Unit of the Office of the Attorney General. Sorry we can't come to the phone right now...."

Must be lunchtime. Oh! Wait..it's almost 2 PM. It's quitting time.

It's probably an unstaffed office anyway.

 

[CrazySanMan]

I'll try calling and emailing this afternoon.

 

[Mr H]

What's the most direct official email addy for UnderDoug?

 

[Miss Lead]

idtheft@oag.state.md.us.

I emailed asking their advice on what to do if an entity (without naming names) has had a security breach, but has not yet filed the required report or notified victims. I'll post any response.

 

[Mr H]

Cool.

I think you'll do fine here.

 

[CrazySanMan]

Voicemail, so I sent this email:

I believe my personal identifiable information, including my name, address, phone number, social security number, veteran status, and other personal information has been comprised, but the party which held this information has not made the loss public yet.

What actions should I take to protect my information? Should I contact the credit agencies, and if so what should I tell them? Do I have any recourse against the party that negligently released my PII? I am worried that my home may be targeted for a burglary based on some of the information that was released. How can I protect my wife and children?

Thank you,
CrazySanMan

 

[Bolts Rock]

Voicemail, so I sent this email:

We should all send that exact same email!

 

[CrazySanMan]

We should all send that exact same email!

Be my guest. We need to make a lot of noise about this, envelop and attack from every angle.

 

[Miss Lead]

Voicemail, so I sent this email:

Hey CrazySanMan! Did you hack my email....that's very close to the one I sent!!! LOL!

 

[Miss Lead]

Cool.

I think you'll do fine here.

Thank you Mr. h. I consider you my mentor!

 

[CrazySanMan]

Hey CrazySanMan! Did you hack my email....that's very close to the one I sent!!! LOL!

Great minds think alike

 

[Mr H]

Thank you Mr. h. I consider you my mentor!

Oh, #$%^



Now... for how long? Just so I can get the invoice correct......

 

[Blacksmith101]

I'll call tomorrow. If I have trouble getting through to a person do you think it would be alright to call their Boss?
"Please direct any questions to Jeff Karberg, Administrator of the Identity Theft Program at (410) 576-6574."

Or should I call their Bosses Boss? Attorney General Gansler.
From their site it is interesting to see what others with data breaches are doing:

Montgomery County School System
http://www.oag.state.md.us/idtheft/Breach Notices/ITU 218361.PDF

South Carolina
http://www.oag.state.md.us/idtheft/Breach Notices/itu-226000 (1).pdf
http://www.oag.state.md.us/idtheft/Breach Notices/itu-224440.pdf

Prince Georges County Government
http://www.oag.state.md.us/idtheft/Breach Notices/itu-224435.pdf

As the crime of identity theft has grown, lawmakers have worked to protect consumers' personal information from identity thieves. The Personal Information Protection Act (PIPA), Md. Code Ann. Comm. Law 14-3504 was enacted to make sure that Maryland consumers' personal identifying information is reasonably protected, and if it is compromised, they are notified so that they can take steps to protect themselves. PIPA contains provisions for notification of consumers in the event of a data security breach and for reasonable security measures to protect consumers' personal identifying information.

 

[Miss Lead]

The one that sent me over the edge was if you look at the Security Breach Reports for 2013 and one of the most recent breaches was reported by Fidelity. Appears that some poor secretary inadvertently faxed a document, ONE SINGLE DOCUMENT, to the wrong number, and Fidelity was required to file a Security Breach Report.

Meanwhile....back in Maryland....well, just go ahead and put your name, address, DOB and SSN on a billboard on 695 at rush hour. You'd be more secure. At least your mother might see it on her way home from work so she could give you a heads up that you might need to take precautions to protect yourself.

My neighbors knew nothing of this until I mentioned it to them yesterday morning. They were shocked.

 

[Ungermc]

I'm going to join the fun here too...sent my email, we'll call tomorrow.

 

[Kat]

Emailed also calling in am

Sent from my HTC Aria using Tapatalk 2