Data Misuse: Police

Police Officer Amerdeep Singh Johal has been sentenced to 6 years in jail for blackmail.

Johal, pictured, was using one of the Met Police’s intelligence databaPC Johalse to blackmail sex offenders. Pc Amerdeep Singh Johal was demanding money from the offenders for his “co-operation”.

While the police have investigated and convicted this man, quite rightly, it appears it is another example of data guardians misusing the information.

The police stated that There are strict guidelines in place regarding the use of intelligence databases and if anyone abuses it that is taken extremely seriously.”.

But the reality is that this occurs more often then we would hope, or others are willing to admit:

In 2008 there were two cases of police officers accessing data for their own purposes. One police officer used information to harass and intimidate an innocent woman; another used his access to criminal records to gain access about his partners’ family.

In 2008 the Liverpool Lib Dem council obtained the phone records of the leader of the council opposition

In 2008  councillors used the RIPA Act to put a family undersurvellience, including being followed, to see which school they should attend.

In 2007 CCTV operators in Cardiff turned the cameras onto people’s homes and hotel rooms when they were supposed to be guarding the Welsh Assembly.

In 2006 council CCTV operators were involved in taking zoomed in photos of people appearing in naked in photo shoots.

In 2005 CCTV council operators in the UK used their cameras to repeatedly spy on a woman in her house and bedroom.

in 2005 NCP CCTV operators were accused of filming a couple having sex and copying the film onto DVD.

In 2004 police, along with a private detective agency, were involved in illegal phone tapes.

In 2002 a BT employee was involved in tapping a celebrity’s phone

In 2002 a WPC used police databases to locate a woman she believed was having an affair with her husband

 

 

 

Data Misuse: Attorney General Ohio

Another month, another official getting caught misusing data (with a very low detection rate the concern is how many are not getting caught).

In Columbus Ohio, Erin G. Rosen, who worked as  general counsel within the Attorney General offices, has been accused of using the company databases to find information about colleagues.

It appears that this is not the only case to have occurred in the office with another person resigning this year over improper conduct in the office.

 

Source

 

Ever wondered why you get Junk Mail at your new home?

Ever wondered why you get Junk Mail at your new home? Its because your local council sells the details to junk mail companies.

In fact selling the electoral role is a pretty steady income for most councils.

Currently the Ministry of Justice are in discussion about banning this practice, but the MoJ have stated that they will look at the overall effect of just a ban “not just on the individual but the economy as a whole”. Which makes the ban unlikely. Also the junk mail industry has never reacted well to such a suggestion, stating, amazingly, that such an action would not be “environmentally friendly”!

Its nice to know that the MoJ have our data nicely protected, after they have lost so much of it.

Doctor uses Medical Records …Illegally

If the evidence of the Data Guardians misusing data was not already enough, with numerous examples of the police and councils misusing information and the government losing data faster than they are giving money to the banks, another case hardly seems relevant, but it is worth reporting because its slightly different.

In this  latest case n surgeon, Mr Hans Desmarowitz, a vascular surgeon photographs, maps, personal information and medical records relating to a secretary.

This information was stored on his PC and offered to private detectives to investigate her and her boyfriend, all very creepy…and the government want to allow for more access to medical records

 

 

 

Police investigate $50,000 data deletion

PORTSMOUTH — Police are investigating a report alleging the deletion of tens of thousands of dollars worth of data that was stored in a Congress Street computer system.

According to the city’s public police log, on Nov. 2 at 8:22 p.m., a caller told police a former employee went to the Congress Street location to pick up a paycheck and while there, deleted electronic architectural plans valued at $40,000 to $50,000. The reporting party also told police the former employee never returned a key that was used to gain entry to the building, according to police records.

Police Sgt. Mark Newport said the case is “at its infancy stages” and remains under investigation.

 

Source

Data Misuse: Passport Office

It has been reported that the IPS, Identity and Passport Service, has dismissed 14 staff over the past three years, i.e one every 12 weeks, in relation to data misuse.

This means that the data guardians in the passport office, those who, quite literally, control the gateway to the country have been caught add fired once every 12 weeks misusing their powers and accessing the passport office database for their open purposes.

Of course the number of people actually doing this, and not caught will be much much higher. Like data loss, the people who are caught is much lower than the people who are caught committing the act.

Burglary detection rates are at less than 10% (in real numbers), and this is with a multiple polices forces, billions spent on fighting crime, dedicated burglary squads all around the country, carefully monitored targets, witnesses, physical evidence, and perhaps most importantly a victim who reports the crime.

In the world of data loss, none of those scenarios exist, the police are not interested in data theft/data loss, there is no physical evidence, no witnesses, and rarely a complainant.

Therefore if 14 people have been caught misusing the database the reality is that the actual number of people who have been misusing the database will be in the hundreds.

Once we have accepted this problem is occurring, why then need to ask, and answer two questions:

Firstly, how do we stop it?

Secondly, and more concerningly, why are people accessing our data?

 

 

 

 

DT Reports on Data Misuse

BONN, Germany — Deutsche Telekom today announced more findings concerning breaches of data privacy regulations and the investigation of additional incidents. The new Member of the Board of Management responsible for Data Privacy, Legal Affairs and Compliance, Dr. Manfred Balz, explained the incidents the company is now investigating. “Data privacy is now represented directly at Board of Management level: As the new Member of the Board of Management, I am personally committed to the issue,” Balz emphasized. “At the same time, I extend this obligation to every manager and employee who has to do with the privacy and security of customer data.”

 

At the beginning of October the Board of Management tasked Group Internal Audit with the review of measures taken within the Group in response to the theft of 17 million sets of customer data in 2006. A report has now been submitted. The investigations were in response to open questions generated by the most recent findings relating to the theft of data

 

Source

NHS: Medical Records are on the move again

The medical records in the UK seem to be constantly moving around.

One day its the government planning on passing the data to private companies, another its the police getting access to medical records for anti-terrorism purposes.

We also know that these medical records are often misused as well.

But now figures have been released that show over 300 million records have been transfered from the government to academic organizations (as there are only 60 million people in the UK, the figure must assume multiple records per person, and include individual visits to doctors and hospitals). These records are identifiable.

The NHS routinely lose data as it is, with four out of five NHS trusts having lost patient data, but the probability of data loss and misuse has now radically increased. It should be remembered that Universities are not immune from data loss and and data misuse.

With grey market companies specializing in selling personal data, for as little as £100 per item, the question is not who has access to you medical records but who does not?

 

 

 

 

 

 

Emerging Cyber Threats – Report 2009

On October 15, 2008, the Georgia Tech Information Security Center (GTISC) hosted its annual summit on emerging security threats and countermeasures affecting the digital world.

At the conclusion of the event, GTISC released this Emerging Cyber Threats Report—outlining the top five information security threats and challenges facing both consumer and business users in 2009. This year’s summit participants include security experts from the public sector, private enterprise and academia, reinforcing GTISC’s collaborative approach to addressing information security technology and policy challenges.

Full Report

DarkMarket Is Taken Down

A website used by criminals to buy and sell credit card details and bank log-ins has been shut down after a police operation, the BBC has learned.

International forum Darkmarket ran for three years and led to fraud totalling millions of pounds.

Nearly 60 people connected with the site have been arrested in cities including London and Manchester as well as in Germany, Turkey and the US.

Source