CD in refurbished drive contained unencrypted info on 15K NYC transit workers

Share this article:

Roughly 15,000 active, retired, former, and deceased New York City transit workers may have personal information – including Social Security numbers – at risk after the unencrypted data was discovered on a CD inside a refurbished CD drive.

How many victims? Roughly 15,000. 

What type of personal information? Names, dates of birth, Social Security numbers, earnings information and other data.

What happened? A CD containing the information was discovered inside a refurbished CD drive sold by a retailer.

What was the response? An investigation is ongoing to determine the cause of the breach.

Details: The Associated Press obtained a letter from Sidney Gellineau, Metropolitan Transportation Authority (MTA) chief information officer, dated March 6. Putting unencrypted information on a CD is a violation of MTA policy.

Quote: “While we do not suspect nor have seen any evidence of misuse of the data, every precaution is being taken to ensure that this is the case,” Gellineau wrote in the letter.

Source: bigstory.ap.org, “15K NYC transit workers have personal info exposed,” March 13, 2014.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

RECENT COMMENTS

FOLLOW US

More in The Data Breach Blog

About 60K transactions possibly affected in Cape May-Lewes Ferry breach

The security of card processing systems relating to food, beverage and retail sales at the Cape May-Lewes Ferry was compromised and payment card data may be at risk.

Arkansas State University-Beebe is investigating a potential breach

Arkansas State University-Beebe is notifying students and employees of a service running on one of its servers that could pose a potential breach to the system.

Unencrypted discs missing, Arizona State Retirement System notifies 44,000

Arizona State Retirement System notifies nearly 44,000 individuals enrolled in dental plans that two unencrypted discs containing their personal information are missing.