Welcome | Sign In
TechNewsWorld.com
ID Security

Farmer Discovers USDA Data Leak

Print Version
E-Mail Article
Reprints
Farmer Discovers USDA Data Leak

After inadvertently publishing the social security numbers of 63,000 people on the Internet, the USDA has said it will offer a year of free credit checks to those whose numbers were listed. The social security numbers were embedded in longer strings of numerals, which may be why they were allowed to be published.


The U.S. Department of Agriculture will give free credit monitoring to tens of thousands of people whose social security numbers were inadvertently made public on a government Web site.

The USDA said it is aware of no cases where the so-called private identification information was used for identity theft or other illegal purposes, but the potential exists, especially since the information was disseminated over the Internet.

The affected people received loans through the government's Farm Service Agency (FSA) or USDA Rural Development (RD), said the USDA. The agriculture department said the social security numbers were removed from the Web site immediately after USDA learned about the situation last week.

No Signs of Misuse

"There is no evidence that this information has been misused," stressed USDA in a statement. "However, due to the potential that this information was downloaded prior to being removed, USDA will provide the additional monitoring service."

Last week, the USDA said 63,000 people were affected but it was in the process of recalculating that number yesterday, USDA Press Secretary Keith Williams told TechNewsWorld.

The free credit monitoring will be limited to one year.

The department did not realize the social security numbers were easily available to anyone doing a Web search. It found out on April 13 when a farmer, whose farm was a recipient of the government agriculture funding, came across the data when she did a Web search on her farm's name.

Embedded Numbers

Google (Nasdaq: GOOG) directed the woman to a Web site operated by government watchdog group OMB Watch. The site got its information from the U.S. Census Bureau, which initially published the USDA data, OMB Watch Communications Director Brian Gumm told TechNewsWorld.

"All of the private identifying information was embedded in a larger [numeric string] and therefore not immediately identifiable," noted the USDA. "The same day, all identification numbers associated with USDA funding were removed from the Web site."

The fact that the social security numbers were embedded in a larger number might explain why they were allowed to be published, said Gumm.

The government is now in the process of generating new federal identification numbers that do not contain any personal identification information.

The Human Touch

The case points out the importance of making sure the people involved in making government data public are careful with sensitive information, privacy and information policy consultant Robert Gellman told TechNewsWorld.

"Somebody, without paying any attention, made social security numbers available in this fashion and we've come to learn in the past 10 years that disclosing social security numbers maybe isn't such a good idea" said Gellman.

However, there seemed to be a bit of hype surrounding the case since miscreants in search of personal identify information have many ways of getting it, he said, including the purchase of lists with social security numbers.

Other Means for Misbehavior

"Social security numbers are not exactly secret numbers," said Gellman. "You can buy somebody's number on the Net for few dollars. I would not like to have my social security number published on the Net, but these farmers have had their numbers available for a long time and whether anything bad happened to any of them, I don't know. There have been a lot of security breaches with millions of people whose information was published, lost or released. In an extremely large percentage of those cases, nothing happened to anybody."

Although OMB Watch's site helped distribute the private information, Gumm said Fedspending.org serves an important function in a country that values transparency in government and open public records. Gellman said the line between private data and the public's right to know where government money is being loaned or spent is sometimes fuzzy.

"Not everything personal is necessarily secret," he noted.


Print Version E-Mail Article Reprints More by Fred J. Aun


Related News Alerts

Google Activate Alert | Search Archives

More by Fred J. Aun

Intel Feels Fury of OLPC Scorned
January 09, 2008
"Over the entire six months it was a member of the association, Intel contributed nothing of value to OLPC," said OLPC. "Intel never contributed in any way to our engineering efforts and failed to provide even a single line of code to the XO software efforts even though Intel marketed its products as being able to run the XO software."
Yahoo Pumps Up Mobile Effort in Bid to Get a Jump on Google
January 08, 2008
"Yahoo's ultimate goal is to bring the best possible Internet experience to the billions of mobile consumers around the globe," said Marco Boerries, executive vice president of Yahoo's Connected Life division. "We believe that to succeed on such a scale, the best strategy is to open up our mobile platform in order to tap the innovation and talent of the world's developers and publishers."
Wikia's Search Philosophy: It Takes a Village to Challenge a Giant
January 07, 2008
"What you see here is our first alpha release," says a greeting on the Wikia Search site. "We are aware that the quality of the search results is low. Of course, before we start, we have no user feedback data. So the results are pretty bad. But we expect them to improve rapidly in coming weeks, so please bookmark the site and return often."
Don't miss a story -- sign up for our FREE e-mail newsletters and view the latest headlines at a glance.
Tech News Flash [ View Sample ]
E-Commerce Minute [ View Sample ]
ECT News Network Weekly Newsletter [ View Sample ]
Shortcuts
ECT News Network Information
Reader Services
Corporate
ECT News Network