X

Misplaced data leave 800,000 Californians exposed

The lost data contained names, Social Security numbers, drivers license numbers, and other personal information.

Roger Cheng Former Executive Editor / Head of News
Roger Cheng (he/him/his) was the executive editor in charge of CNET News, managing everything from daily breaking news to in-depth investigative packages. Prior to this, he was on the telecommunications beat and wrote for Dow Jones Newswires and The Wall Street Journal for nearly a decade and got his start writing and laying out pages at a local paper in Southern California. He's a devoted Trojan alum and thinks sleep is the perfect -- if unattainable -- hobby for a parent.
Expertise Mobile, 5G, Big Tech, Social Media Credentials
  • SABEW Best in Business 2011 Award for Breaking News Coverage, Eddie Award in 2020 for 5G coverage, runner-up National Arts & Entertainment Journalism Award for culture analysis.
Roger Cheng
2 min read

Electronic files containing the names, Social Security numbers, and other private data about 800,000 California adults and children were there one minute. And the next, they were gone.

 

Four computer storage devices containing data from California's Department of Child Services were lost during transport between Boulder, Colo., and Sacramento, Calif., earlier this month, the Associated Press reported earlier today. The data was brought to an offsite location to test the department's ability to cope with a disaster and included a test of whether the data could be managed remotely.

The test itself was apparently successful, with IBM managing the data in its remote facility. The storage devices were then supposed to be transported back to California via Iron Mountain. But since the company doesn't fly, the AP reported, the devices were shipped via FedEx instead.

A spokesman for the state's Office of Technology Services told the AP that it believes the container holding the devices wasn't properly secured and fell out during transport. The incident highlights just how easily data can be lost, despite the protections that are put in place.

IBM said a statement that there is no indication the data on the storage devices have been improperly accessed or used. The company added it was working "diligently with all involved parties to find the unaccounted-for storage devices."

Also exposed were addresses, drivers license numbers, health insurance providers, employers, and information on parents and their children.

The Department of Child Services has notified via mail the people possibly affected by the loss and has also alerted credit reporting agencies, the state Attorney General's Office, and the state's Office of Privacy Protection.

Updated at 10:29 a.m. PT: to include a statement from IBM.