Oct 3, 2007 7:58 pm US/Eastern
Mass. Accidentally Sends Disks With Personal Info
BOSTON (AP) ―
State regulators inadvertently distributed disks containing personal data, including Social Security numbers, of 450,000 licensed professionals in the state.
The problem occurred when the state began using new software to distribute the names and addresses of professionals licensed by the Division of Professional Licensure and the Division of Health Professions Licensure.
Marketing firms and other businesses routinely ask for the information under the state's public records law.
The new software, which the state began using on Sept. 11, failed to delete the Social Security numbers of those on the lists -- including engineers, nursing home administrators, certified public accountants and other professionals -- when transferring the information to disks.
When a staff member discovered the error, officials said they immediately contacted all those who had been sent the disks, requesting the disks not be used and be returned immediately.
Of the 28 disks mailed out, all but two have been recovered.
The two remaining disks -- which including the names and personal information of about 16,000 individuals -- are believed still to be in the mail and officials said they have contacted the intended recipients and requested they alert them when the disks are received.
The state also received signed affidavits by most of recipients that they haven't opened the disks, officials said.
Officials say they have received no complaints about possible identity theft and are launching an investigation into the incident. The process of filling such information requests was immediately suspended pending a review of the system.
"We take any situation where an individual's personal information may have been compromised extremely seriously," said Daniel Crane, director of the Office of Consumer Affairs and Business Regulation. "We are taking steps that will insure that such an incident can not occur again."
Those steps include hiring an independent security firm to help put new security procedures in place.
The Division of Professional Licensure has notified both the Secretary of State and the Attorney General's offices and has begun the process of contacting each individual whose personal information was contained on the disks, officials said.
The Executive Office of Housing and Economic Development also said it will begin a review of the process and will put in place new rules for the distribution of sensitive information.
"We plan to implement strict guidelines and create protocols to insure the personal information of the Commonwealth's license holders is protected," said Secretary of Housing and Economic Development Dan O'Connell.
Individuals who are concerned about their personal information can contact the Division of Professional Licensure for assistance.
(© 2007 The Associated Press. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed.)
Stumble It!
