Identity Theft – PrivaSecTech Wed, 13 Nov 2019 18:33:33 +0000 en-US hourly 1 Identity theft at UVic Wed, 11 Jan 2012 07:00:22 +0000 Continue reading Identity theft at UVic]]> Over the week-end, the University of Victoria’s new administrative building was broken into. A payroll server with the personally identifiable information (PII) of over 11,000 people was on it, including social insurance numbers (SIN), as well as bank account information. I’ve been told there were no cameras or alarms in the area, and the information was not encrypted. If your organization handles personal information, let this be your final reminder to ensure that all personal information is encrypted both while in transit (transport layer) as well as on the computer (storage layer).

I was interviewed for over 30 minutes by CBC BC today, a few second made it onto the news. Check out this clip from the top of the 6pm news.

One of the tips I gave but didn’t make it in, is to annually request a copy of your credit report. This is free once a year to do if you send your request in writing, and is the best way to determine if you’re a victim of  identity fraud. When you do this, put it in your calendar as a reminder to make the request again in a year from now.


UPDATE: Jan 13, 2012:

Saanich news is reporting that UVic will pay for $1.7M worth of credit reporting monitoring as a result of this breach. So if you’re thinking your organization can’t afford an organization like PrivaSecTech to protect the personal information of your staff and clients, this is another example of how being proactive would have been less than 1% of the reactive cost. It costs you nothing more than an email or a phone call to see what we can do for your organization. We look forward to working with you to ensure this doesn’t happen to you.

Your credit report Wed, 06 Oct 2010 18:42:46 +0000 Continue reading Your credit report]]> There are two credit bureaus in Canada, Equifax and Transunion (there was a 3rd, American company, but it appears to be defunct). Contrary to the prices listed all over their websites, they’re obligated to provide you with one free credit report every 12 months. You should make a request to each organization, as they don’t seem to synchronize their data in our experience, and where things may look great with one, could look terrible with the other. Bonus points with your request if you ask their respective privacy officers who they provide your personal information too, they’re required by Canadian privacy legislation to respond to this request.

Making this request has several benefits, from our perspective, the main benefit is that this is the best way you can determine if you’ve become victim to identity fraud. Also, it gives you an ideas of what financial institutions think about you, the next time you want to apply for credit, a loan or mortgage. We also think you’ll be surprised when you see how many organizations they provide this information too.

The Equifax Credit Report Request form (pdf)

Transunion Customer Disclosure Request Form (pdf)

Once you’ve sent these off, add them to your calendar to repeat the exercise in 12 months from now.