Crap!

Student Loan Company Loses Borrower Data

Guess who had a student loan in the early 90's? Guess who the guarantor was?

What I really want to know is:

1. Why did a contractor have access to the private data in the first place?
2. Why was the data not cleansed the moment it came out of the production environment?
3. How did the hardware come to be missing?
4. What sort of punishment is the contractor facing?
5. What steps is TG and/or Hummingbird going to take to ensure this doesn't happen again in the future?
6. What reparation will be made to me or the other 1.3 million people who may fall victim to identity theft?
7. Is there any real recourse against an institution who has a lapse in security such as this one?
8. As a financial institution, I assume that TG had passed a SAS70 audit. Were they?

Oh well. What a load.

technorati tags:identity theft, TG, Hummingbird, SAS70, security

Blogged with Flock