Thursday, May 14, 2009

Intelius Blog is Journalism First, Marketing Second

http://www.peoplesearches.com/news/
Easton at BusinessBlogWire writes a review of the Intelius corporate blog today. Like Easton, I have some quibbles with style (the posts are awfully long). But it's a great example of the kind of "journamarketing" you could be doing.

Intelius helps people get access to public information through personal background checks and other services. They deal with a lot of complicated issues, and the people who work there become experts in that space. So they're using their blog to explain some of those complicated issues. It's really nothing more than journalism. There's no overt sales pitch for Intelius. For example, the blog has entries about what kinds of mistakes you might find in public records -- and whether it's a good idea to publicize the names of people who've received concealed-weapons permits.

You might think this is a silly thing for them to spend time on. But when people want to dig into public records, I'll bet they almost always go online first. So building a repository of information, dedicated to helping people track down public information, will pay off in the long run with more referral traffic and a better online reputation among people who might use Intelius' services.

Information about Intelius, Founded by Naveen Jain

Founded by Naveen Jain, Intelius well known in the information commerce industry helps clients make intelligent decisions about assets, people, and businesses. Intelius applies advanced heuristics to public and publicly-available information, delivering it on-demand and online to consumers and businesses to facilitate a more informed decision-making process in business and life.

Intelius ranks among the top 100 most trafficked Websites, with an average of one million unique visitors daily. The many products and offerings of the company include a set of comprehensive and customizable pre-employment screening services, a consumer-facing people search service, list management, and an award-winning identity theft detection, prevention and insurance service.

Intelius’ background checks have helped consumers make better decisions about the people, businesses and assets in their world, from potential dates to new neighbors.

People search by Intelius, has reconnected thousands of people with friends or relatives with whom they’ve lost touch. In the HR world, Intelius’ employment screening services enable companies to analyze candidates’ professional backgrounds, from drug testing and fingerprinting to criminal records, professional licenses and education verification, plus a best of breed SSN verification service.

These services have helped create leads and confirm data for millions of customers, in addition to giving them peace of mind and the ability to make better decisions by making use of valuable public information. The Intelius executive team consists of IT and Internet professionals, technologists, business providers, and security specialists, and is led by Chairman Bill Owens and CEO Naveen Jain.

Intelius makes security available at multiple levels, including the personal, technological, and operational levels. Intelius also protects customers’ personal names, credit card numbers, and social security numbers. Intelius’ Verisign certificate signals safe and secure web transactions.

Reference: Intelius.com

http://www.peoplesearches.com/news/

Intelius Blog is Journalism First, Marketing Second

http://www.peoplesearches.com/news/
Easton at BusinessBlogWire writes a review of the Intelius corporate blog today. Like Easton, I have some quibbles with style (the posts are awfully long). But it's a great example of the kind of "journamarketing" you could be doing.

Intelius helps people get access to public information through personal background checks and other services. They deal with a lot of complicated issues, and the people who work there become experts in that space. So they're using their blog to explain some of those complicated issues. It's really nothing more than journalism. There's no overt sales pitch for Intelius. For example, the blog has entries about what kinds of mistakes you might find in public records -- and whether it's a good idea to publicize the names of people who've received concealed-weapons permits.

You might think this is a silly thing for them to spend time on. But when people want to dig into public records, I'll bet they almost always go online first. So building a repository of information, dedicated to helping people track down public information, will pay off in the long run with more referral traffic and a better online reputation among people who might use Intelius' services.

Information about Intelius, Founded by Naveen Jain

Founded by Naveen Jain, Intelius well known in the information commerce industry helps clients make intelligent decisions about assets, people, and businesses. Intelius applies advanced heuristics to public and publicly-available information, delivering it on-demand and online to consumers and businesses to facilitate a more informed decision-making process in business and life.

Intelius ranks among the top 100 most trafficked Websites, with an average of one million unique visitors daily. The many products and offerings of the company include a set of comprehensive and customizable pre-employment screening services, a consumer-facing people search service, list management, and an award-winning identity theft detection, prevention and insurance service.

Intelius’ background checks have helped consumers make better decisions about the people, businesses and assets in their world, from potential dates to new neighbors.

People search by Intelius, has reconnected thousands of people with friends or relatives with whom they’ve lost touch. In the HR world, Intelius’ employment screening services enable companies to analyze candidates’ professional backgrounds, from drug testing and fingerprinting to criminal records, professional licenses and education verification, plus a best of breed SSN verification service.

These services have helped create leads and confirm data for millions of customers, in addition to giving them peace of mind and the ability to make better decisions by making use of valuable public information. The Intelius executive team consists of IT and Internet professionals, technologists, business providers, and security specialists, and is led by Chairman Bill Owens and CEO Naveen Jain.

Intelius makes security available at multiple levels, including the personal, technological, and operational levels. Intelius also protects customers’ personal names, credit card numbers, and social security numbers. Intelius’ Verisign certificate signals safe and secure web transactions.

Reference: Intelius.com

http://www.peoplesearches.com/news/

Tuesday, August 12, 2008

ITRC's 5th Annual Aftermath Study Released: An Analysis of Identity Theft Through the Victims' Eyes

The Identity Theft Resource Center (ITRC) released an important report today discussing the impact of identity theft victimization. Since 2003, the Identity Theft Resource Center has conducted annual victimization surveys to study the impact of identity theft crimes on its victims.

Now in its fifth year, the report allows us to analyze the data, draw some conclusions, map trends and identify areas for further research. While ITRC reports the data in terms of percentages, it is critical that we remember those numbers are people. These are people with lives that have been interrupted, altered, torn apart and/or changed.

According to several sources, The Aftermath is the only study of its kind. This study reflects only the experiences of confirmed identity theft victims who worked with the ITRC, and is not a census or general population-based study. The questions asked ranged from the emotional impact this crime has had on their lives all the way through to their ability to recover their good name. It includes the financial loss to the business community in goods and services.

The Aftermath 2007 does not distinguish between those who are still being affected from those who are not. Thus, certain measures of victimization represent conservative estimates since the assessment was limited to the ending date of the study.

The following are highlights of The Aftermath 2007 study. An analysis of the entire study was done by two business analysts and a psychologist, with their comments included in the full report. The full report can be found on the ITRC website: www.idtheftcenter.org.

Prevalence of Types of Identity Theft Crimes: Financial identity theft crimes were reported by 78% of the respondents, 2% reported criminal cases only, and 2% reported governmental issues only. The rest were combination cases: financial and criminal (7%), financial and governmental (9%), and a mixture of all three types (3%).

Uses of victim information: More than one-half (57%) of the 2007 sample reported their personal information had been used to open a new line of credit in their name. 13% of all respondents noted their information was used for obtaining new cable and/or utility services. It should be noted, check fraud and debit card fraud are increasing. The ITRC continues to predict that criminals will turn to other types of identity theft when it becomes more difficult to open new lines of credit. This may indicate changes due to the sampling taken.

Non-financial forms of identity theft: In 2007, 62% of respondents reported thieves had committed financial crimes that resulted in warrants being issued in the victim’s name, more than 2 ½ times higher than in 2006. All areas of criminal identity theft combined with other issues increased between 2006 and 2007. It should be noted that identity thieves continued to obtain government assistance and benefits using the victim’s information.

Sources of Stolen Information: With a five-year history to study, it is clear that according to the respondents about 1/3 of cases were started by a person known to the victim. The next highest category of identity theft originated from a lost/stolen wallet or PDA. Scams have become more of a problem for victims in 2007 than in previous years. Identity theft due to mail theft and theft of information from a burglary of car or home has dropped in the past few years.

Moment of Discovery: In 2007, 82% of victims found out about the identity theft through an adverse action compared to 76% in 2006. Only 10% of respondents found out about the crime due to proactive measures taken by businesses and 8% saw something unusual on their credit report. 42% reported that they found out within the first three months of the crime. One analyst believes that people found out more quickly because of the more aggressive nature of collection efforts and the tightening of the credit market.

Costs to Victim: Respondents in 2007 spent an average of $550.39 in out-of-pocket expenses for damage done to an existing account. In reference to new accounts, respondents spent an average of $1,865.27 compared to $1,342 in 2006.

Cost to Business: In 2007, the average loss in goods and services to businesses, as reported by survey respondents, was $48,941 compared to $87,303 in 2006. Six individuals exceeded $100,000, with one in excess of $700,000. This study only includes respondents who contacted the ITRC in 2007 and is not necessarily indicative of a national business loss average.

Victim Hours Repairing Damage: In The Aftermath 2007, victims reported spending an average of 116 hours repairing the damage done by identity theft to an existing account used or taken over by the thief. Answers included 6,000, 8,640, and 5 years of time (outliers). In cases where a new account was created, respondents reported an average of 158 hours to clean up the mess with outliers of “endless” and “too many to count."

Extended involvement: In 2007, 70% of victims indicated that it took up to 12 months to clear issues of all misinformation, compared to 50% in 2006. A moderate amount of victims (12%) took one to two years. Unfortunately, some 19% indicated that it took two or more years to resolve their case.

Response by Creditors, Utilities and Collection Agencies: As in previous years, credit issuers, utility companies and collection agencies continue to rate poorly in their handling of identity theft victims.

Inability to Clear Negative Records: Credit agencies, either by putting negative information back in records (31%) or not removing it in the first place (32%), topped the list of reasons for victims’ inability to clear their records. Other prominent responses include Social Security Number tied to another person’s file (22%) and victims’ fraud alerts ignored (19%). An increase was also seen in the sale of credit accounts even though the fraudulent account was cleared by the creditor and the inability to get proof even with a police report.

Unexpected secondary effects: Victims reported a number of additional problems including: increases in insurance rates, current credit card interest rates and criminal records not being cleared. The inability to get credit resonated with the majority of respondents (64%). In addition, 53% have collection agencies still calling, 27% had credit cards cancelled (even though the accounts were being properly maintained), 18% said it affected their ability to get a job, and 14% reported tenancy issues.

Relationship of Imposter to Victim: It is important to note that a large percentage of respondents seem to have been victimized by those who may have had easy access to personal identifying information including friends, family members, ex-spouses/significant other, or those in close contact with the victim, such as co-workers.

Child Identity Theft: In 2007, 47% of this special case group reported that one, both, or a step parent was the thief. Another 12% reported that it was another family member. 18% said that the person had access to information but is not related and 24% did not know how the case first began. The age of the victim when the crime FIRST began varied, with 18% under five years old. It should be noted that the crime may have been discovered years later.

Victim Response to Family or Child Identity Theft: Throughout the five year range, we have seen spikes in categories such as “family supports victim in trying to force responsibility on the thief.” Family support does appear to be increasing, yet some families are torn or still in denial or want the victim to drop the case.

Emotional Impact: Few significant positive changes have occurred in the feelings of victims and in terms of reported victim symptomology. More than 49% of the respondents reported stressed family life, 22% felt betrayed by unsupportive family members and friends, and 23% said their family didn’t understand. (Table 17)

The strongest feelings expressed were: rage or anger, betrayal, unprotected by police, personal financial fears, sense of powerlessness, sense they were grieving, annoyed, frustrated, exhausted, sleep disturbances, an inability to trust people, and the desire to give up and stop fighting the system. Long term emotional responses included: suicidal, feeling captive, ready to give up and felt that they have lost everything.

Reference: identitytheftdaily.com

(PeopleSearches.com) and (USPublicRecords.com) and (BackgroundCheckDirectory.com) and (IDTheftDefense.com) and (USPRS.com) and (USPeopleFinder.com) and (IdentityTheftDefense.com)

5 “DISPOSABLE” Web Accounts to Keep Your Identity Safe

Fed up with spam? Tired of telemarketing calls? Feelin’ paranoid about identity theft? … Here you’ll find a bunch “throwaway” web tools that can help you out.

Disposable eMail Account:

Mintemail - Instant disposable email for any ‘fishy’ registration form or sign-up. Go to mintemail.com and a random email address will be automatically generated and copied to your clipboard. You can either bookmark the location of created inbox and use it on a regular basis or always use a new one.

Highlights include: Automatic eMail verification, email forwarding, option to set custom expiry times (from 1 hour to 1 month) and more.

Disposable Phone Number:

Numbr - This is a really good one. Basically, Numbr gives you an anonymous disposable phone number that can be set to forward all incoming calls to any provided landline or mobile number (US only). Absolutely-free. It’s an ideal solution for times when you want to keep your phone private but want to list your contact number in places like classifieds listings, social networking sites, blogs, etc.


Along with the number, you also get access to dozens of cool functionalities, i.e. forward to voicemail, ability to activate/deactivate nr. at any time, etc. Read more: Numbr - Disposable Phone Number.

Disposable Login Details:

BugMeNot - Here you can get disposable login details (username/password) for a huge number of popular news/review/download websites that normally require users to register.


For example, let’s say you clicked on a link that points to an article on a popular media website (eg. NYT). Usually instead of landing straight on the article page you’re asked to signin or register. Maybe there is a good reason behind it, but what’s the point of signing up if that is your first and only visit to that website.

When it comes to BugMeNot, it instantly gets you a number of “public” login details that can be used to access the website. It’s fast, it’s convenient and you don’t have to worry about getting spammed. Check out full feature list in BugMeNot review.

Disposable Name and Address Generator:

FakeNameGenerator - Fun tool for quickly generating fake but totally sound names and contact address. Cool part about it, not only you get to choose country of residence but can also specify what kind of name you’re looking for, i.e. Chinese, American, Indian, etc.


Disposable File Sharing:

File.io - Anonymous file sharing service where you can upload and share file/s (via password-protected URL) for 30 days. Once 30 day period is over, all shared files will be automatically deleted.

Read More on Disposable Accounts

Disposable Web Accounts: To Keep Your Internet Interactions Safe

The guys and gals over at MakeUseOf.com have put together a list of 5 useful disposable web services that allow you to make your web interactions a little more private.

The services are something that most everyone will use whether you are selling something on Craigslist, registering for a new forum where you'll need to click a verification link sent through e-mail to validate your account, or just a disposable account to share some files with co-workers or friends.

In addition to the links that they've put on their list, I'd like to toss out a couple of others.

PrivatePhone.com provides you with an anonymous voice mail box at a dedicated number. This is a service I use myself when I'm listing a contact number on Craigslist or other places where I sell stuff online.

I also use it for most any other occasion where I won't want to give my real cell phone number out. The service is free and I have never had a problem with it.

Giving out your real e-mail address nowadays is pretty much you requesting to get sent a bunch of spam e-mails. Spamgourmet solves that problem.

It allows you to create a disposable e-mail address that you can give out to people and places who you'd rather not give out your real e-mail address too.

But here's the twist. It also has a spam blocker built in. Here's a little more about it as they've described it on their website.

If you give your email address to everyone, you are bound to receive spam emails, and you won't know where they came from. Wouldn't it be convenient to give a different email address to every business or web site, while getting all your email as before?

Wouldn't it be easiest to assume the address will be given to spammers, and have it work as a spam blocker by shutting off automatically unless you decide otherwise?

That's exactly what spamgourmet offers! There is nothing to install on your computer, and once you're set up, it's likely you won't ever have to come back here. This is what makes spamgourmet one of the most convenient and effective anti-spam tools available.

Reference: makeuseof.com
-------------------------------------------------/////
DISPOSABLEACCOUNT.COM
DISPOSABLEACCOUNTS.COM
DISPOSABLEACCOUNTSERVICE.COM
DISPOSABLEACCOUNTSERVICES.COM
DISPOSABLEIDENTITIES.COM
DISPOSABLEIDENTITY.COM
DISPOSABLEWEBACCOUNT.COM
DISPOSABLEWEBACCOUNTS.COM
DISPOSABLEWEBSERVICE.COM
DISPOSABLEWEBSERVICES.COM

Tuesday, August 5, 2008

DOJ, Secret Service Move Against International Hacker, ID Theft Ring

U.S. Attorney and Secret Service claim an international crime syndicate was behind the identity theft of more than 40 million credit and debit card numbers from TJX Companies, BJ's Wholesale Club, OfficeMax, Boston Market, Barnes & Noble, Sports Authority, Forever 21 and DSW. Department of Justice and Secret Service allege the hackers used "Wardriving" to hack networks and "Sniffer" programs to capture card numbers and customer data.

In what is believed to the largest hacking and identity theft case ever prosecuted, the DOJ (Department of Justice) said Aug. 5 it has indicted 11 people for the theft and sale of more than 40 million credit and debit cards.

According to the DOJ, the card numbers were obtained by "wardriving" and hacking into the wireless computer networks of major retailers including TJX Companies, BJ’s Wholesale Club, OfficeMax, Boston Market, Barnes & Noble, Sports Authority, Forever 21 and DSW. Wardriving involves locating Wi-Fi networks from a moving vehicle with a laptop or PDA.

Once inside the networks, the hackers installed "sniffer" programs that would capture card numbers, as well as password and account information, as they moved through the retailers' credit and debit processing networks. After the thieves collected the data, they concealed the data in encrypted computer servers that they controlled in Eastern Europe and the United States.

The DOJ indictment claims the conspirators sold some of the credit and debit card numbers over the Internet to other criminals in the United States and Eastern Europe. The stolen numbers were "cashed out" by encoding card numbers on the magnetic strips of blank cards. The thieves then used these cards to withdraw tens of thousands of dollars at a time from ATMs.

"So far as we know, this is the single largest and most complex identity theft case ever charged in this country," Attorney General Michael Mukasey said at a Boston news conference. "It highlights the efforts of the Justice Department to fight this pernicious crime and shows that, with the cooperation of our law enforcement partners around the world, we can identify, charge and apprehend even the most sophisticated international computer hackers."

In an indictment returned on Aug. 5 by a federal grand jury in Boston, Albert "Segvec" Gonzalez, of Miami, was charged with computer fraud, wire fraud, access device fraud, aggravated identity theft and conspiracy for his role in the scheme. Gonzalez was previously arrested by the Secret Service in 2003 for access device fraud.

During the course of the current investigation, the Secret Service discovered that Gonzalez, who was working as a confidential informant for the agency, was criminally involved in the case. The DOJ said that because of the size and scope of his criminal activity, Gonzalez faces a maximum penalty of life in prison if he is convicted of all the charges alleged in the Boston indictment.

Criminal indictments were also released in Boston on related charges against Christopher Scott and Damon Patrick Toey, both of Miami. In addition, indictments were unsealed in San Diego against scheme participant Maksym "Maksik" Yastremskiy, of Kharkov, Ukraine, and Aleksandr "Jonny Hell" Suvorov, of Sillamae, Estonia.

The San Diego grand jury also indicted Hung-Ming Chiu and Zhi Zhi Wang, both of the People's Republic of China, and a person known only by the online nickname "Delpiero."

The indictments charge the defendants with crimes related to the sale of the stolen credit card data that Gonzalez and others illegally obtained, as well as additional stolen credit card data. Suvorov is charged with conspiracy to possess unauthorized access devices, possession of unauthorized access devices, trafficking in unauthorized access devices, identity theft, aggravated identity theft, and aiding and abetting.

Yastremskiy faces charges of trafficking in unauthorized access devices, identity theft, aggravated identity theft and conspiracy to launder monetary instruments. The indictment also contains a forfeiture allegation. Chiu, Wang and Delpiero are charged with conspiracy to possess unauthorized access devices, trafficking in unauthorized access devices, trafficking in counterfeit access devices, possession of unauthorized access devices, aggravated identity theft, and aiding and abetting. All are believed to be foreign nationals residing outside of the United States.

In May, Gonzalez, Suvorov and Yastremskiy were charged in a related indictment in the Eastern District of New York. The New York charges allege that the trio was engaged in a scheme to hack into computer networks run by the Dave & Buster’s restaurant chain. According to the indictment, they stole credit and debit card numbers from at least 11 locations.

The New York indictment claims the defendants gained unauthorized access to the cash register terminals and installed at each restaurant a packet sniffer. The packet sniffer was configured to capture credit and debit card numbers as the information was processed by the restaurants. At one Dave & Buster's location, the packet sniffer captured data for approximately 5,000 credit and debit cards, eventually causing losses of at least $600,000 to the financial institutions that issued the credit and debit cards.

Gonzalez is currently in pre-trial confinement on the New York charges. Based upon the San Diego charges, Turkish officials arrested Yastremskiy in July 2007 in Turkey when he travelled there on vacation. He has been in confinement since then in Turkey, pending the resolution of related Turkish charges, and the United States has made a formal request for his extradition.

Suvorov was apprehended by the German Federal Police in Frankfurt in March on the San Diego charges when he travelled there on vacation. He is currently in confinement pending the resolution of extradition proceedings.

"While technology has made our lives much easier it has also created new vulnerabilities. This case clearly shows how strokes on a keyboard with a criminal purpose can have costly results," U.S. Attorney Michael J. Sullivan said. "Consumers, companies and governments from around the world must further develop ways to protect our sensitive personal and business information and detect those, whether here or abroad, that conspire to exploit technology for criminal gain."

Reference: eweek.com

(PeopleSearches.com) and (USPublicRecords.com) and (BackgroundCheckDirectory.com) and (USPRS.com) and (IDTheftDefense.com) and (USPeopleFinder.com) and (SecurityInformation.com)

Monday, August 4, 2008

Two Arrested in Countrywide Identity Theft Scam Investigation

A former Countrywide Home Loan employee and another man were arrested Friday on suspicion of selling the identities of the troubled lender's customers, the FBI announced.

Rene L. Rebollo, Jr., 36, of Pasadena, and Wahid Siddiqi, 25, of Thousand Oaks, were arrested by FBI agents at their homes.

Authorities allege Rebollo, who was employed as a senior financial analyst for Countrywide Home Loan's subprime mortgage division, Full Spectrum Lending, sold the identification data to Siddiqi, who then sold it to others.

Rebollo had access to Countrywide's computer databases that contained private information about its customers, prosecutors said.

He was fired in July, according to the government.

The FBI and Countrywide Financial investigators discovered the security breach and began a joint investigation, U.S. Attorney's Office spokesman Thom Mrozek said.

During an interview with FBI agents last month, Rebollo said he gave out Countrywide customers' account information to third parties for two years, according to prosecutors.

Rebollo said he got the information from computers at work, then copied the data onto flash drives with the intent to sell it, according to the FBI.

He said he made between $50,000 and $70,000, prosecutors allege.

An FBI informant ordered personal profiles from Siddiqi, who later met the informant and allegedly sold the data for cash, prosecutors said.

Investigators are analyzing the data to determine if any customers' identities have been compromised, and Countrywide officials will notify and assist any victims in the case, Mrozek said.

Rebello is charged with exceeding authorized access to the computer of a financial institution, which is punishable by up to five years' imprisonment.

Siddiqi is charged with fraud and related activity in connection with access devices, which carries a penalty of up to 15 years in federal prison.

Reference: myfoxla.com

(IDTheftDefense.com) and (PeopleSearches.com) and (USPRS.com) and (USPeopleFinder.com) and (USPublicRecords.com) and (BackgroundCheckDirectory.com)

Wednesday, July 9, 2008

DMV Puts Coloradans at Risk of ID Theft

The Division of Motor Vehicles put 3.4 million Coloradans at risk of identity theft due to flaws in the way driver's-license information is handled, lawmakers learned Tuesday at an interim transportation committee hearing.

The DMV regularly sends large batches of personal information over the Internet without encryption and has failed to properly limit access to its database, according to a recent audit. At one point, 33 former DMV employees could access names, addresses, dates of birth and Social Security numbers — some workers more than a year after their departure, auditors found.

Revenue Department leaders who oversee the division say they are working to hire internal watchdogs and build up their technological defenses.

But the state, facing a budget shortfall, will have no additional money in the foreseeable future for new computer systems. Cyber security alone is a $1.5 million problem that will be tough to solve, said Roxy Huber, Revenue Department executive director.

"To tell you that I'm going to have the tools to do what I need to do, I don't know where they're going to come from," Huber said. "But we will continue to do the best with the tools that we have."

A recent $1.168 million Homeland Security grant will buy some technology upgrades, but it's unclear how much will be used to safeguard personal information.

Colorado ranks eighth in the nation in identity-theft complaints per person and first in the nation when it comes to general fraud reports. On average, those frauds cost victims $4,041 each for a total of $41.3 million in 2007, according to in formation from the attorney general's office.

No cohesive responsibility plan

Auditors said the DMV's method for handling sensitive information was "fragmented, disorganized and poorly planned," partly because the division is made up of a number of decentralized offices scattered across the state. No one person is responsible for security.

High turnover — 60 percent of entry-level workers leave during their first year — and low, $26,280-a-year starting salaries make fraud more attractive and management more difficult, DMV officials said.

While employees have been caught issuing hundreds of fraudulent licenses, there are no known instances of identity theft or information security breaches, said Department of Revenue spokesman Mark Couch.

"It's not like we have a completely defenseless system," Couch said. The audit "says that we need to take more steps."

Funding losses cut resources

Lawmakers Tuesday cut the department some slack, acknowledging that steep budget cuts in the early 2000s led to downsizing.

"Without the appropriate resources, there's no way we can hold you accountable for doing some of the things you're expected to do," said Sen. Nancy Spence, R-Centennial.

Protecting personal information isn't the DMV's only immediate concern, however.

Auditors said the division must better ensure that its employees know how to spot fake documents, don't fraudulently issue IDs, deactivate the licenses of the deceased and perform checks of applicants' immigration status.

And while the state checks employee backgrounds for crimes committed in Colorado, it does not look at other states or federal crimes.

Positive steps

Some problems already have been fixed.

The 33 former employees with database access immediately had their passwords deactivated once auditors identified them, and the DMV now compiles monthly lists of departed workers to prevent future lapses.

The division has a long-standing policy of redacting the last four digits of Social Security numbers before they're transmitted, and the division plans to encrypt all transmitted information by June 2009.


Other audit findings:

While the DMV's most serious problems are with the way it protects personal information, state auditors also chided the division for:

1) Checking employees for criminal records in Colorado but not nationwide.

2) Frequently failing to check the immigration statuses of license and ID card applicants.

3) Needing better training on how to spot fake documents.

4) Failing to properly monitor employee activity to prevent the issuance of fraudulent licenses and ID cards.

5) Leaving active the licenses of dead people, though the DMV has since begun reconciling its records with death certificates.

Other audit findings are available online at www.leg.state.co.us/osa/coauditor1.nsf.

Reference: denverpost.com

(USPublicRecords.com) and (BackgroundCheckDirectory.com) and (IDTheftDefense.com) and (PeopleSearches.com) and (USPRS.com)