Providers push insurance covering theft of identity
635227
Ed Bloom considered himself a very educated consumer when he made the decision last year to purchase identity theft insurance.
559893
New Yorkâs attorney general is looking into if insurers forced patients to overpay for out-of-network doctors.
390941
Faced with increasing threats of theft of consumer data, credit-card companies are rolling out higher security plastic.
464701
Insuring companies for costs related to data breaches used to be a slow business, but after the multimillion-dollar TJX case, companies are suddenly scrambling for coverage -- and some are being rejected by insurers for inadequate policies and procedures.
462000
By John Reid Blackwell, Richmond Times-Dispatch, Va.  Jun. 7--Another local credit union is being targeted by phishers -- people trying to steal personal information online.
324254
Wellpoint Inc., a managed care firm, has begun notifying 75,000 members of its Empire Blue Cross and Blue Shield unit in New York that a compact disc holding their vital medical and other personal information had disappeared, The New York Times reported.
133972
With videos, pictures and reams of other data piling up on computers everywhere, consumers who want some insurance against losing it all have a growing number of online backup options.
432894
Up to 800,000 of the school's students, faculty and alumni may be vulnerable to identity theft.  What went wrong, and what can be done about it?
664327
Scammers and thieves are out there, but you can protect yourself.
316188
LOS ANGELES (CBS.MW) -- Consumers are doing a better job of guarding against identity thieves, yet most still give out too many personal details, making themselves vulnerable to becoming one of the millions of victims each year, according to a survey
68204
People who use internet networking sites are being warned that they could be at risk of identity theft.
389598
Massachusetts' new top business regulator yesterday called on retailers to start disclosing how well they protect customer credit-card and debit-card data, an idea gaining traction after a data breach at retailer TJX Cos. last month.
208428
Part-time workers, contractors, and early retirees who usually wouldn't qualify for corporate health insurance could get coverage under a plan unveiled yesterday by a consortium of dozens of large companies.
266836
Across the security industry, experts are encouraging businesses to abandon piecemeal IT systems and data-defense efforts in favor of overarching risk management strategies.According to some customers, consultants, and vendors, the strategy is starting to prove particularly helpful in addressing issues of identity management and access control.Long identified by industry analysts as an area where businesses often end up "chasing rainbows" and getting involved in never-ending projects, experts contend that by adopting a risk-based model to drive identity management, customers' goals are actually being realized."When developing our architecture, it became very clear that one of the processes that was important to tackle before starting to change things in one region or business unit was to do risk assessment and integrate all the subjects related to access control," said Paulo Martins, enterprise identity and access manager at financial services giant ABN AMRO.In 2006, the banking company made a decision to rework its identity infrastructure as part of an effort to make access control an even more central focus of its enterprise security strategy.Rather than simply looking for a new technology to improve its standing, ABN AMRO found that by getting a fix on the areas of its business where controlling access to sensitive data was most crucial -- and then assessing the varying levels of efficacy within its existing operations -- it found a way to move its project forward faster and with a greater sense of direction."As companies get larger and the numbers of applications increase, and they grow through mergers and acquisitions, they find that they have different levels of maturity related to identity and access," said Martins. "We built our strategy considering all of these things. The first year was dedicated to process and access control reviews; the second year involved implementation of those processes and use of risk analysis for critical applications."Among the most valuable topics that ABN AMRO was led to consider as part of its process, he said, was where it made sense to automate identity-based control for its applications and where it did not.By gauging the number of users and criticality of the data involved in each area of its business, the company was able to set its priorities and get controls in place where the risk of information loss was most widespread or severe, said Martins.Using risk management to prioritize security As part of its project, ABN AMRO brought in consultants from PricewaterhouseCoopers (PwC) to help map out its areas of need and define where its greatest data and identity risks lay.Jerry Lewis, a principal and national identity management leader at PwC, said that his company is advising more customers to tackle their projects using a risk management strategy because it allows them to refine their plans and improve their security standing with greater alacrity."We're definitely seeing risk management becoming the next real extension of identity management," Lewis said. "Most large companies we see have spent a lot of time and money putting solutions into place to drive various requirements -- such as in addressing compliance regulations -- and once they have the infrastructure installed, they realize that they need to use more of a risk-based approach."Lewis said that more customers than ever are starting to adopt the risk-based identity management approach to get a better fix on handling applications and systems access from an enterprise-wide manner.Those companies' immediate goals tend to revolve around their desire to improve identity management reporting capabilities, and to create dashboards that garner metrics related to potential compliance audits, he said."People are looking at this issue from more of a broad perspective, based on regulatory drivers, and focused on very specific applications or needs," Lewis said."Doing so, these companies are able to take a step back and find out what they really need to address first," he said. "They want the company-wide view, but they're also realizing that they typically can't have a complete end-to-end solution across the organization that is one size fits all and that they need use this risk-based approach."As a result of the success that companies are having using the strategy, the consultant said that more customers have earmarked funds to buy products that apply the risk-based approach to identity during 2008.One of the vendors PwC works with in the space, and the software provider to ABN AMRO, is SailPoint, a startup founded in 2005 whose products are focused squarely on identity auditing and analytics as well as policy enforcement and the creation of automated controls.SailPoint executives said that customers are looking for a new generation of identity management tools that address the issues that will help them pass audits and give them more of a top-down view into where their organizations stand in terms of securing access."People began getting pressured to address issues of compliance and audit around Sarbanes-Oxley, but traditional identity tools were not designed to solve those problems, they were mostly about improving operational efficiency, and people have been stretching those technologies to do things they weren't designed to do," said Mark McClain, chief executive and founder of SailPoint."Most of these systems were initially designed to set up accounts and do password resets, but with compliance needs, it has to become more about governance and risk assessment," he said. "Customers are frustrated because they've spent all this money dealing with the terms of the regulatory audits, yet the breaches have continued because they haven't been able to address the real risks."
415821
SAN FRANCISCO Thousands of Wells Fargo and Company mortgage and student-loan customers may be at risk for identity theft after four computers were stolen last month from a vendor that prints loan statements.
227898
By Anonymous  Computer Security PEOPLE who use their home computers to access Thrift Savings Plan accounts can be vulnerable to having their personal information stolen.
380529
Things just aren&#39;t going well for Timothy Scott Short. Just days after a pair of tech support calls he made to printer manufacturer Digimarc&#160;resulted in his arrest, he now finds himself on the receiving end of a data breach with his Social Security number and birthdate accidentally made public via the federal court&#39;s Electronic Case Files (ECF) system.It&#39;s an ironic development, because Short, 33, was arrested in connection with the Oct. 5 theft of a Missouri Department of Revenue printer and a PC containing data on as many as 500 state residents.Short&#39;s personal information was discovered by the IDG News Service, listed on a court document called a Criminal Case Cover Sheet, which was publicly available to users of the ECF system. Normally, this document should only be accessible to those involved in the case, but it appears to have been inadvertently made public, according to a clerk with the U.S. District Court for the Eastern District of Missouri, who asked not to be identified because she was not authorized to speak with the press. &quot;It&#39;s something on our side,&quot; she said, adding that technical staff is now looking into the problem.The U.S. Judicial Conference, which sets policy for U.S. courts, has said that this kind of information should be removed from publicly available electronic court records, but actually removing all the sensitive information has proved difficult.&quot;If you went online to various court systems, you could find social security numbers of many individuals,&quot; said Paul Stephens, director of policy and advocacy with the Privacy Rights Clearinghouse. &quot;It&#39;s a really, really difficult question to answer, just because you&#39;re dealing with so many jurisdictions.&quot;Social Security numbers are the building blocks of identity theft crime because they can be used to secure credit cards. &quot;Any time you are placing Social Security numbers online, your are subjecting that person to identity theft,&quot; Stephens said.With the push to make public documents available online, other government databases have had similar problems. Earlier this year, the states of California and Colorado were forced to take their Uniform Commercial Code (UCC) databases offline after privacy advocates pointed out that the Social Security numbers and other data they contained could be misused by identity thieves.Short, however, may have bigger problems to worry about. He&#39;s facing $250,000 in fines and 10 years in prison on charges of possession of &quot;document-making implements&quot; in connection with the theft. He was arrested after U.S. Secret Service Special Agent John Bush recognized his voice in calls placed to a tech support line of the company that makes the stolen printer.&#160;