Wow, that is very unfortunate. Two years of credit reporting doesn't help much when their SSNs never expire and can be harvested by underground id theft websites for years to come. These victims need to watch their accounts, use credit freezes, or purchase credit monitoring on their own after year 2 and for the next 20-50 years!
Deloitte should be using sensitive data discovery software to ensure employees aren't copying data to discs and leaving them in seat pockets. Is it really that hard to search a desktop for unprotected SSNs? Why doesn't every employee at a firm like that search their data themselves all the time? Then if they have to create a CD, it is created with encrypted data.
Discussion on:
Message 1 of 1
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox



