Important Update on Veteran Data Theft

Military.com ^ | May 27, 2006

[Eagle9]

Dear Military.com Member,

As you may know, data was stolen from the Department of Veterans Affairs. This data contained identifying information on up to 26.5 million veterans and spouses, including names, Social Security numbers, dates of birth and some disability ratings.

At this time, we encourage you to be vigilant and monitor your financial accounts to protect yourself against identity theft. We have put together the following information to help you:

Read the latest from the Department of Veteran Affairs

Important FAQs

• What happened at VA and how does it affect me?
• How do I know if information on me was stolen?
• What should I do to protect myself?
• What should I do if I detect a problem with any of my accounts?

  Additional articles and resources:

• Protect Yourself Against ID Theft
• Identity Theft: What if Your Info is Stolen?

  Free Credit Reports

• www.experian.com
• www.AnnualCreditReport.com
• or call: 1-877-322-8228

Identity Guard has recently announced veterans affected by the recent data theft can have 6 months of Fraud Protection Service free. To learn more about this offer, go to www.fraudprotect.com

At Military.com, we have taken great strides to safeguard member information. We will continue to keep you informed on this situation as it develops.

Thank You,

Military.com

---

[Eagle9]

Identity Guard has recently announced veterans affected by the recent data theft can have 6 months of Fraud Protection Service free. To learn more about this offer, go to www.fraudprotect.com

[zip]

ping

[BJungNan]

At this time, we encourage you to be vigilant and monitor your financial accounts to protect yourself against identity theft.

You know, it is not like everyone as the best credit record. I mean, it only applies if they can get a credit card in your name. Right?

[BIGLOOK]

Bump and thanks.

Last I'd heard the records were from '75 and on. However, better safe than ....SOL.

[Eagle9]

You know, it is not like everyone as the best credit record. I mean, it only applies if they can get a credit card in your name. Right?

I think you are correct but I'm not certain. There may be ways to manipulate credit card application data that people who specialize in such crimes know.

[FlingWingFlyer]

From what we've been seeing from government bureacrats in Washington, I wouldn't be the least bit surprised to find that this was done intentionally to embarrass the Bush administration. I don't trust any of them anymore.

[Eagle9]

Last I'd heard the records were from '75 and on. However, better safe than ....SOL.

Yes, those discharged after 1975 but those of us discharged before 1975 and have accessed the V.A. for benefits are also included. At least, that's what I've read but I'm not sure.

[Eagle9]

Source: http://www.military.com/Finance/content/0,15356,98690,00.html#1

Does this only affect veterans discharged after 1975?

It potentially affects all veterans who were discharged after 1975, which is when VA automated its records systems and began regular input of information received from the Department of Defense on all separating veterans.

When VA automated its records systems, VA also input data from all historical claimant records that had been manually maintained by the agency. This data loss therefore also potentially affects all veterans who have ever filed a claim for VA disability compensation, pension, or Education benefits, or who have (or had) a VA insurance policy – no matter when the claim was filed or when they were discharged. These veterans would be included even if their claim was denied or they are not currently receiving benefits.

We urge all veterans to be extra vigilant and monitor their financial accounts.

I have never applied for benefits from VA. Do I need to be concerned?

The electronic data stolen includes information from many veterans who have never filed for VA benefits or contacted VA. Since the 1970s, VA has received information from the Department of Defense on all who served. You are encouraged to take steps to protect yourself against identity theft.

[gleeaikin]

My husband was treated at the VA from 2002 until his death last June, do I need to be concerned, and if so, what should I do?

My son is currently serving in Afghanistan, he has been in the Army or the reserve since 1988. Should he be concerned, should I be alerting him or his wife, or will they be doing that on base in Afg?

[DoughtyOne]

It disturbs me that this took place. As bad as it is though, it adds insult to injury to realize the idiot that took the information home, hasn't been fired or arrested. Frankly, I think both are warranted.

[Eagle9]

When VA automated its records systems, VA also input data from all historical claimant records that had been manually maintained by the agency. This data loss therefore also potentially affects all veterans who have ever filed a claim for VA disability compensation, pension, or Education benefits, or who have (or had) a VA insurance policy – no matter when the claim was filed or when they were discharged. These veterans would be included even if their claim was denied or they are not currently receiving benefits.

[Lurker]

Wrong. If they have your birthdate, SSN, and mothers maiden they can get anything.

What if they get a DL in your name, and decide to rack up a few misdemeanors and not show up for their court dates. Then arrest warrants get issued. Then you get stopped at a roadside 'safety check'.

Guess who's going to spend a night in the pokey...

L

[Eagle9]

My husband was treated at the VA from 2002 until his death last June, do I need to be concerned, and if so, what should I do?

I can only suggest that you use the links above to find answers to your questions. I wish I knew more but ...

[6SJ7]

From what we've been seeing from government bureacrats in Washington, I wouldn't be the least bit surprised to find that this was done intentionally to embarrass the Bush administration. I don't trust any of them anymore.

I've had similar suspicions about this story.

• The 'analyst' who took the data home was not authorized to do so. How did this employee gain access to the data and copy it?
• Why the need to work on this data at home?
• How long was the employee in possession of this data prior to the theft? The shorter the duration, the more suspect the timing of the theft.

[BIGLOOK]

Thanks for the info, Eagle9.

I collected on the GI Bill while in school.......so I guess I'm in the data soup.

[NY Attitude]

Kind of coincidental that the person that took home the data had a burglary. Strange!

[BJungNan]

Wrong. If they have your birthdate, SSN, and mothers maiden they can get anything. What if they get a DL in your name, and decide to rack up a few misdemeanors and not show up for their court dates. Then arrest warrants get issued. Then you get stopped at a roadside 'safety check'. Guess who's going to spend a night in the pokey...

When we post on here, we are not always correct with what we write. But we are always right when we post on here because thinking individuals like you help us correct our misconceptions.

You are so correct. I was not considering all the ramimfications.

FReepRegards,
BJN

[Lurker]

I'm happy to be of service.

I too am a veteran who's information is quite probably among the data stolen because of this careless government employee.

I apologize for the abruptness of my response, but I'm pretty ticked about this. If the thief figures out what he or she has, lots of people could have very serious problems.

Best of luck to you.

L

[Leatherneck_MT]

bump for later reference

[DoughtyOne]

Exactly. My thoughts as well...

[familyop]

There's no update, but there is information on how we can try to assume responsibility for what our fed did to us through some civil service dingbat hired by the fed.

[NY Attitude]

Is there a possibility to sue for mis-appropiation of government data and the resulting loss thereof? The suit would have to be filed as a "jointly and severally" type suit to really be effective.

[jpsb]

Well isn't this just wonderful. (not)

[BJungNan]

First, God Bless you for your service to our country. Second, no worries on your directness. It was not overboard - I took it as someone having strong feelings on the issue. And a better perspective on it.

[JockoManning]

Bookmark.

[Sundog]

Bump for Veteran Identity Theft.

[VOA]

bump

[maine-iac7]

I mean, it only applies if they can get a credit card in your name. Right?

no

They can establish a new "self" - you use your ID for a lot more than credit cards.

But in that vein, as one example, they could open up a debit card account, bank accounts, drivers license, car registration, etc - use those for ID for anything you use an ID for - and eventually, become "you" - which will cause you a whopping load of trouble...may even, down the line, start collecting social security. It takes lots of time and money and frustration to straighten out a stolen identity

[maine-iac7]

careless government employee

I'm a bit suspicious of this. There has to be a strict rule against taking any data home and every employee has to know it.

Couple that with the fact that he just as he takes it home -ooops - stolen.

I'd be looking to see his background, contacts, any unusual funds in his possession - etc

[WLR]

The real issue here is why in the first place is that sort of data available on a disk, an unsecure disk at that? It quite properly belongs on a secure server sited in a secure facility. Stored on Encrypted Drives requiring two part authentication to access. With few exceptions the records should only accessible on an individual basis (one at time) maybe by no more than 3-4 people at once without specific authorization and purpose approved by both the Senior System Administrator, System Security Officer and whom ever is their Chief Information Officer. There is no reasonable explanation why everyones data was sitting on one Disk in the first place.

This is almost as asinine$ as when it was revealed that Los Alamos kept some of our most sensitive data related to Nuclear Weapons research and production on the same servers they allowed general access to by nearly everyone at Los Alamos. To get an idea of what those idiots did right click
any icon on your windoze desktop. You will see "Properties" where it says "read only" "Hidden" our Chinese friend basically just unchecked the box (probably command line driven rather that GUI (Graphic user Interface) and that is how he went about giving himself permission to download the files (claims about his "innocence" blah blah blah I have never bought it. Los Alamos looked like such idiots and of course our leadership as well, they just wanted the entire affair to go away I believe.

Now our VA has achieved an even higher degree of silliness allowing this to occur. I is important to remember however they have nothing on the next group.

Not to be outdone in the idiot IT security department the US Army IT guys in Kabul if the media story is to believed allowed unencrypted flash drives to wander off post and downtown with unsecure intelligence information on them.

Argggh!!!
All easily fixable by three monkeys and football which by all accounts would have been more equal to the task than those assigned. W

[WLR]

Think about this. Our Authorities Threw Mitnick (Hacker extrodinare) in Jail for hacking right? Charged then dropped the charges against the Chinese Guy at Los Alamos they laid out a perfectly plausable tale so I figure he is guilty but really it is impossible to know either way (that would be an awful situation to find yourself in if you were innocent). They Threatened to throw Phil Zimmerman in Jail for creating PGP well actually because people sent it overseas on paper (so it could not be blocked) In each case somebody fairly bright appeared to have out thought the current security. Why not follow the tradition of the US Navy with Lucky Luciano and put them to work for the US helping us secure stuff (not sure if the Chinese guy really qualifies but since they wrecked his reputation anyway. If they kept an eye on him and he had a mind to he could really bring some perspective to the problem. The point is we keep hammering some of the Best and Brightest amongst us be they Kids or otherwise. (Zimmerman does not even own PGP which he created anymore.)

Why not put them to work and make things related to security for the US work properly.


W

[Old Student]

"Why not put them to work and make things related to security for the US work properly."

Not a bad idea, but who will guard the guardians? We need hackers, but can we trust them? Horns of a dilemma time, that!

[Jacquerie]

Just because the data could be sold for huge $$$ does not in any way of course impugn the patriotism of this honest, hard working . . . government official. /sarc

[DoughtyOne]

I'd like to have the FBI check this guy's finances about every six months for the next couple of years. That includes off-shore accounts.

You don't take a (or multiple) disks like this home and then lose it.

BTW, why hasn't this guy been cashiered, or has he?

[Guenevere]

bttt

[Jacquerie]

I'm fairly certain I read in an AP article that he resigned.

Imagine if a private company did something similar. Anyone whose identity was subsequently stolen could sue and recover some damages. Think a vet could do the same?

[DoughtyOne]

Well, some of them should stand up and scream bloody murder. If not this will happen again, or worse.

[Eagle9]

Janesville Marine Victim Of ID Theft While Overseas
http://www.freerepublic.com/focus/f-news/1644668/posts?page=31#31

Current Servicemembers Possibly Affected by VA Data Loss
http://www.freerepublic.com/focus/f-news/1644668/posts

[isom35]

maybe now would be a good time to sign up for the identity theft protection deals, like from equifax, experion, trans union?

[Eagle9]

maybe now would be a good time to sign up for the identity theft protection deals, like from equifax, experion, trans union?

You can get a 90 day fraud alert put on your credit check for free at those three companies you listed. After 90 days, call again and get another fraud alert.

Identity Theft is much worse than fraudulent credit cards. It can take years and a lot of $$ to get corrected.

[Fruitbat]

From what we've been seeing from government bureacrats in Washington, I wouldn't be the least bit surprised to find that this was done intentionally to embarrass the Bush administration. I don't trust any of them anymore.

I'm not sure that I trust this "protection site" since they want far more information that we've been told was taken.

What, how, do they "protect" anyone?

[Fruitbat]

Kind of coincidental that the person that took home the data had a burglary. Strange!

Quick, somebody check the guy's freezer!

[NY Attitude]

He must have some "cold cash" around somewhere.