Archive for the ‘Federal Government’ Category

New “Data Passing” Scams Exposed

Thursday, July 1st, 2010

What do online companies like Orbitz, Priceline and Travelocity have in common?

Nope, guess again.

All three have found themselves  in the middle of complaints about dubious business practices. The behavior in question has recently been investigated by the Federal Trade Commission on behalf of boatloads of victimized consumers.

The scam here,  refers to the practice of sharing or “passing” credit card information over to a third party at the end of a transaction without the knowledge or explicit consent of the buyer.

The retailers deny any wrongdoing.

The practice known as “Data Passing” or “Pre-Acquired Account Marketing” was the subject of a high profile, year-long investigation by the Senate Commerce Committee according to a June 22, 2010 article in the Washington Post.

According to published reports:

“In May 2009, Chairman Rockefeller launched an investigation into a set of controversial e-commerce business practices that have generated high volumes of consumer complaints. Since that time, Commerce Committee staff has been investigating three Connecticut-based direct marketing companies – Affinion, Vertrue, and Webloyalty – as well as the hundreds of online websites and retailers that partner with these three companies to sell club memberships to online shoppers. Although this investigation is not yet complete, it is clear at this point that these three companies use highly aggressive sales tactics to charge millions of American consumers for services the consumers do not want and do not understand they have purchased.”

Bob Sullivan from MSNBC.com  also reported that the problem has triggered an astounding $ 1.4 billion in unauthorized charges onto the credit card bills of  30 million Americans.

Senate investigators revealed that this practice was used by over 450 e-commerce websites and retailers. Many of the names on the list are well-known and respected companies who got around existing data-privacy and banking rules by forming partnerships and joint ventures with third parties.

Credit card issuer Visa, has taken a stand and no longer allows merchants to use the so-called “Data-Pass Marketing” on their network.

Despite Visa’s policy and after more than $1 billion dollars in “aggressive and potentially deceptive” sales tactics,  I think it would be fair to complain that the horse is already out of the barn.

2010 U.S. Census Creates ID Theft Vulnerability

Saturday, February 13th, 2010

In March of this year, census takers will begin to thread their way across the highways and byways of our land to conduct the 2010 census.

Despite the skepticism of some,  participation is required under Title 13 of the United States Code. The same law also requires that the Census Bureau tabulate your information without revealing any of your personal data.

The government imposes very stiff fines and possible prison terms for federal employees who violate the privacy guidelines.

Allow me to call another lurking personal privacy threat to your attention. Make sure that anyone you share information with is actually from the Census Bureau!

This reminder came to my attention  from a Vice President of  Security at Austin Bank in Longview,  Texas.  (used with permission)

There has been a lot of advertisement about the 2010 Census. It is important that all people participate in the census since it is only taken every ten years. However, there are people at work posing as census takers to do one simple thing; steal the identity of everyone they can, and either use or sell the information. It is important that you protect yourself and talk to your family and friends, about protecting themselves.

Additionally, the U.S. Census Bureau has issued this statement on their website:

Census workers may need to visit your household to update the Census Bureau’s address list, deliver a questionnaire or ask you to complete the questionnaire face-to-face.  All census workers carry official government badges marked with just their name.  You also may ask them for a picture ID from another source to confirm their identity.  In addition, some census workers might carry a ‘U. S. Census Workers’ bag.  If you still are not certain about their identity, please call the Regional Census Center toll-free number to confirm they are employed by the Census Bureau.

Census workers will never ask  for your:

  • Social security number
  • Citizenship or immigration status
  • Salary or income
  • Bank account information

The reality is that their questions require much less personal information than a typical credit card application. If you would rather not answer questions at your front door, you can mail in your data.

The government says that our participation will help us to “paint a portrait of America”.

Pick up your paintbrush and let your voice be heard.


Top U.S. Banker Newest ID Theft Poster Child

Saturday, September 5th, 2009

On August 25th, President Barack Obama nominated Ben Bernanke to another term as chairman of the Federal Reserve.

In a story reported this week by The Economist:

“The decision was widely hailed on Wall Street and in Washington, DC. With few exceptions, politicians and economists lined up to praise Mr. Bernanke and to laud Mr. Obama for keeping him.”

Coincidentally, also on August 25th, Newsweek Magazine reported:

“Last summer, just as he was dealing with the first rumblings of the financial crisis on Wall Street, Bernanke learned that a thief had swiped his wife’s purse-including the couple’s joint check book. Later, someone started cashing checks on the Bernanke family account…”

“The theft of the Bernanke check book-never publicly revealed until now-soon became part of a wide-ranging (and previously underway) identity-theft investigation by the Secret Service and the U.S. Postal Inspection Service.”

The shocking news is that the “previously underway” investigation exposed what the Justice Department calls “the largest alleged credit and debit card data breach ever charged in the United States.”

Many of the highest profile breaches in U.S. history are allegedly the result of this one mastermind’s activity. Thankfully, the ringleader and two of his co-conspirators are behind bars now.

Victims of the crime-spree reportedly include:

  • Heartland Payment Systems
  • Supermarket chain Hannaford Brothers
  • 7-Eleven stores
  • DSW shoe stores
  • TJ Maxx stores

This is a wake up call for America. If brazen purse snatchers can swipe cash from our top banker’s checking account and hackers can swipe “protected” corporate data with impunity, then the average American continues to remain vulnerable beyond belief.

Protecting your mail, private pins , personal data, passwords, payment instruments (credit/debit cards, checks) and computer data is YOUR responsibility. Despite our best efforts, the portability of data outside of our control, leaves us all exposed in this digital world.

This truth-is-stranger-than-fiction story illustrates another truth. Without the dedicated and ongoing effort of law enforcement, your personal, medical or bank records are just as vulnerable as an attractive unattended purse, slung over the back of a chair at the local Starbucks.

Financial fear grips vast majority of Americans

Friday, April 10th, 2009

A new study conducted and released by Unisys Corporation reveals what most observers and pundits have been saying about our collective jittery nerves lately. With this new level of fear come concerns about fraud and ID theft reaching new heights  and threatening Americans more than ever.

According to the story published on Webwire: “The research, conducted with the latest Unisys Security Index, also confirms that most people are much more worried about their financial security, which saw a 12 percent spike when compared to results polled in September 2008. 

This concern now ranks as Americans’ number one security fear for the first time since Unisys began the global study in 2007. Conversely, the current data also shows the lowest level of concern about national security issues among U.S. consumers.”

The Webwire story goes on to report that more than two thirds of Americans are extremely worried or very concerned about other people obtaining and using their credit or debit card details, with 90 percent at least somewhat concerned.

The better news is that most of the identity theft strategies I’ve written about for some time now, can still protect consumers even in an age of unparalleled financial uncertainty.

By protecting your personal, private and proprietary information, you can still mitigate the effects of our current financial crimes tsunami. By guarding your credit and debit card numbers, bank account numbers, social security numbers, checking account numbers, pin numbers, passwords and computer files……you take away the match sticks that could ignite into to a personal financial firestorm.

None of these methods (including credit monitoring services) are guaranteed to prevent your information from falling into the wrong hands. Careful monitoring of billing and banking statements, credit reports and other financial and medical records will keep you positioned to spot a potential problem.The businesses we frequent also have a responsibility to protect our data and our dollars.

The Unisys study goes on to report: “Banks and businesses need to understand that customers are more wary than ever about using services that may compromise their personal data. If economic concerns increase these fears, companies need new strategies to strengthen customer confidence through accountability and transparency, which also plays to part of the Obama administration’s call to action for government and business.”

The fear gripping our economy is understandable, but we can take proactive steps to minimize our exposure. As a last resort, we can all just repeat this prayer:

“Lord, defend me from my friends; I can account for my enemies.” — Charles DHericault

7 Top Tax Season Fraud Reminders!

Thursday, March 12th, 2009

If tax season is as taxing as ever for you, here are seven ways to reduce your annual tax time anxiety and vulnerability.

* Beware of tax-time ID thieves who create fake IRS websites just for this season.

* Bold fraudsters often “pose” as IRS agents to trick you into revealing personal data.

* The IRS never uses email to initiate contact with taxpayers.

* Any email that promises to deliver refund money should be deleted immediately.

* Taxpayer audit and refund information is always delivered through the U.S. mail.

* Unsolicited IRS contacts sent via email should never be opened or responded to.

* Communication from the IRS can be confirmed by calling (800) 829-1040.

Another common twist is that many unsuspecting taxpayers have received legitimate notifications from the IRS, requesting payment of taxes due on unreported earnings.

This is possible if someone illegally uses your Social Security number to obtain employment. In these cases, an unwitting employer reports the earnings attached to your stolen number and Uncle Sam comes calling for taxes on income you truly never earned!

Protect your Social Security number at all times and at all costs. If you suspect fraud, contact the Social Security Administration  immediately. They can also be reached at (800) 772-1213.

Looming Cyber-Threat Has Fed's Attention

Thursday, January 22nd, 2009

Outgoing National Intelligence Director Michael McConnell reported last week that Cyber-threats are among his greatest concerns, second only to Iran’s continuing development of nuclear weapons.

MSNBC and the Associated Press reported:

“…Iran producing a nuclear weapon and a cyber attack on critical government or private computer networks top the list of concerns nagging at National Intelligence Director Michael McConnell as he prepares to leave office.”

There are many well intentioned observers who seem to think that cyber-crime in general is on the decline inside the United States. Although there is statistically no need for mass panic, it is foolish to assume that our computer infrastructure isn’t the greatest information target in the world. As a practical matter, I think we are all better off with “someone on the gate” to guard our repositories of personal, commercial,  educational, financial and military data.

The truth is that many potentially damaging breaches go undetected and are often intentionally unreported. Back in 2005, the Department of Homeland Security constructed a worst-case-scenario type cyber-attack and concluded that over 20 million credit cards might be affected over a period as short as just one week. The Department concluded that an event like this could undermine faith in the entire U.S. financial system.

We all pray that President Obama’s team remains watchful and vigilant on the cyber-front during these desperate times. The Obama Administration has already declared our nation’s cyber-infrastructure a “strategic asset” and has pledged to protect “America’s competitive advantage”.

Great start Mr. President.

Forecasters Make ID Theft Predictions For 2009

Sunday, January 4th, 2009

Recently, the Identity Theft Resource Center looked forward to the coming year to predict events that will be the inevitable outcomes of the current economic crisis and the looming identity theft battles.

Real Estate: Homeowners who are behind on payments or seeking refinancing sources can easily fall prey to unscrupulous thieves who are more than willing to “take your information and see what we can do”. Bogus land grants and home equity scams will be commonplace. The recommendation is that homeowners speak directly with well known and established banking and mortgage companies in order to avoid the potential pitfalls of unknown solution providers.

Credit Cards: Many consumers may unknowingly turn to thieves in order to get access to credit cards, debit cards and debt consolidation loans. It is easy to imagine handing over private information to seemingly legitimate companies. Like the mortgage industry, the credit card world has been turned on it’s head in the current economic climate. Look before you “leap” into a deal that may be too good to be true.

Check Fraud: Due to the lack of easy credit, many thieves will turn to check fraud as a way to accomplish their crimes. Needless to say, safeguard your checkbook, deposit slips and banking statements as a first line of defense. Many financial advisers are steering clients away from using paper checks at all. If you must write paper checks, be sure to use an anti-check-washing gel pen and keep a close eye out for any irregularities on your statement.

Organized Crime and Cyber-Thieves- Rings of professional thieves from all over the world have helped make identity theft the fastest growing crime in the United States. Security experts agree that these attacks will become more brazen as time goes by. According to the Wall Street Journal, the U.S. Department of Homeland Security has been reviewing “worst case scenarios” for possible attacks against U.S. government, industrial and financial institutions.

Consumer Scams: Common and rampant scams with nicknames such as skimming, phishing, vishing, pharming and whaling will continue in 2009. This is largely due to the weak condition of the U.S. economy, the vulnerability of average consumer and law enforcement’s scarcity of resources to deal with the sheer volume of complaints.

Breaches: Corporate, educational and government security breaches continue to grow every year. According to the ITRC, there were 641 breaches in 2008, surpassing the total of 446 in 2007. Due to the portability of data, the easy theft of laptops, the cunning deception of “inside scam artists” and the desperation of global perpetrators, this number will continue to increase. At the very least, have your own laptop or PDA/smart-phone set up with encryption and password protection software.

Remaining diligent, alert and informed about the latest scams and threats is your best defense against being victimized in 2009. Stay tuned.

If Obama and Palin Can Be Hacked, So Can You!

Monday, December 1st, 2008

With the holiday season upon us and the election season behind us, the average consumer may have their attention diverted away from personal privacy issues.

President-elect Barack Obama and Alaska Gov. Sarah Palin were concentrating on the election, while high tech thieves smelled an opportunity to violate the candidates’ privacy with reckless abandon. These fraudsters were phone company insiders and random email hackers, not mobsters from an Eastern European crime family.

Here is an excerpt from a story posted on fiercewireless.com:

“Verizon Wireless has fired the employees who accessed President-elect Barack Obama’s personal cell phone account without authorization.

A report on CNN.com quoted an unnamed Verizon source, who would not disclose how many people were fired but said, “we now consider this matter closed.” Apparently the employees were involved in customer service and were not authorized to look at an account unless a customer requested it.

The source also said that records of no other well-known customers had been breached. The phone that was accessed was a flip phone that had been inactive for months, and was not a Blackberry or other smartphone from which email could have been sent or data services could have been accessed.”

In Palin’s case, a 20-year-old student at the University of Tennessee has been indicted for breaking into one of Palin’s accounts and posting the information on a public website.

Here’s the point. We are all vulnerable to attack even if we are careful to do everything right in the privacy arena. Recovering from the emotional roller-coaster and sense of violation after being victimized can be both traumatic and lengthy. In extreme cases, you could even be facing a run-in with the law.

Prepare to remain steadfast this holiday season. If you are a member of AAA, you can unwrap an early Christmas present from them just by visiting their website and reading about their “free”, yes FREE credit monitoring and alerts for members only.

How A Financial Crisis Leaves Our Data Vulnerable

Wednesday, October 15th, 2008

As major banks, insurance companies and investment firms fall victim to the current tsunami of financial storms, your privacy may suffer. When firms change hands, downsize their payrolls and transfer massive amounts of data, proprietary information is left exposed and privacy erodes.

At the end of September, the Dow Jones Industrial Average took the single biggest dive in history, dipping 777 points. In the wake of the impending reorganization of American business, your credit card balances, your mortgage, your savings accounts and your credit history will probably be reshuffled and reinserted into the database of the account’s new overseer.

After days of marathon negotiations, the bailout measure initially went down to defeat in the Congress by a vote of 228 to 205. After the Senate and the House gave final approval for a modified version of the $700 billion rescue plan, President Bush signed it into law on October 3rd, 2008.

Although the free markets globally are facing their toughest challenge ever, those markets do work. The problem is that they are controlled by human beings who are subject to behavior that is sometimes irrational, emotional and irresponsible.

Because of the irresponsible and sometimes deliberate misdeeds of the guardians of the financial gate, it is still your responsibility to to guard your personal information the best way you know how.

If you do not have a personal identity theft risk prevention, detection and mitigation plan in place, what are you waiting for? Visit the Privacy Rights Clearinghouse for great tips on how to protect yourself.

Congressman Is a High Profile Data Theft Victim

Saturday, April 19th, 2008

Ironic twist makes this incident noteworthy!

Even high profile identity theft advocates are vulnerable to the threat of data loss, data compromise and data crime.

Representative Joe Barton (R-Texas) was among 3000 patients whose records were reported missing by the National Institutes of Health. An NIH laptop containing the medical records for the patients was reported stolen from the trunk of a vehicle according to a report this month by The Associated Press.

Here’s the irony. Barton is a founder of the Congressional Privacy Caucus, whose mission among other things is to educate members of Congress and their staffs on matters of individual privacy.

It is noteworthy that Rep. Barton only found out about his own breach in press reports. Barton has asked the inspector general for the Health and Human Services Department to investigate why the information wasn’t encrypted and why the NIH delayed disclosure of the breach.

As difficult as it may seem to protect your financial identity, your medical records are much harder to secure. This is primarily because patients have no control over the handling and care of their own personal medical records.

The federal regulation designed to prevent these unsettling scams is the Health Insurance Portability and Accountability Act ( HIPAA) Privacy Rule. Unfortunately, it can be extremely difficult for patients to correct inaccuracies in their medical records, because insurance companies are not compelled to correct records which they did not create.

According to a report on msnbc.com, one medical identity theft victim had the contents of her wallet removed and despite the fact that she quickly cancelled all her credit cards, had almost $14,000 in prescription meds and treatments charged up in her name. Over the next four months, restoring her identity became a part-time job. She fought off bill collectors, struggled to get her own medical prescriptions paid for and nearly got arrested herself on suspicion of being a co-conspirator in the scam.

The numbers can be deceiving. According to the Federal Trade Commission, only 3 percent of U.S. identity-crime victims have their information used by others to obtain medical services or false claim reimbursements. This still means that nearly 250,000 Americans may be victims each year! The rising cost of health-care will only make these crimes more prevalent going forward.

The lurking dangers of not being able to access your own health benefits or having your medical records polluted with potentially life threatening mis-information makes this topic a sure recipe for more than just heartburn.