VA data theft could happen again, GAO says

[deadparrot]

WASHINGTON - Sensitive information on millions of U.S. military personnel and veterans remains at grave risk because of weak security controls that have not yet been fixed, government investigators said Wednesday.

In testimony to Congress, the Government Accountability Office and Veterans Affairs inspector general detailed ignored warnings, weak management and lax rules in their review of VA information security following the theft of 26.5 million military personnel's private data last month.

They found that the Veterans Affairs Department routinely failed to control and monitor employee access to private information, did not restrict users to "need-to-know" data and often waited too long to terminate accounts when an employee quit or was fired.

The investigators also said the VA lacked a clear chain of command in enforcing security, noting the agency will need dramatically stronger leadership under VA Secretary Jim Nicholson to force reform after five years of repeated warnings about security.

http://news.yahoo.com/s/ap/vets_data_theft

[MindPilot]

1. DU lawyers, can we file a class-action against the VA?

If they can't protect my information, then they had best give me the cash I need to do it my self and cover any potential losses I may incur as a result of their negligence.

[stepnw1f]

2. Why is This a Prob All Of a Sudden

when Bush is in Office. Notice the amount of data theft going on sice he took office?

[jwirr]

3. My son-in-law was one of the victims. The VA is telling him

to watch his credit ratings for any problems. Is there anything else he can do? What happens to stolen data like this?