Looks like it's time for me to sign up for credit monitoring now. Crooks walked away with enough unencrypted data to apply for a credit card

Amazing after all these security breaches on the news that companies still don't seem to learn about protecting your personal information.

 

http://articles.chicagotribune.com/2013-08-28/business/chi-advocate-20130828_1_medical-data-health-information-medical-record-numbers

 

http://articles.chicagotribune.com/2013-08-24/business/ct-biz-0824-advocate-20130824_1_credit-report-advocate-medical-group-advocate-health-care

I worked for a tech company where we had a DDoS attack for almost 2 weeks that shut our entire company down, and they STILL wouldn't beef up security. I had my friend, who's a security consultant contact them - and they said they were completely fine.

 

Then a bunch of our shit got wiped.

 

Stupid people are going to be stupid, because in the end: dolla dolla bills yo. That's all it boils down to. It has nothing to do with actual security, but what the cost of implementing said security is. It sucks that all that info was taken, but hey! Their company is still intact and running! Yaaay. 

Thats part of the problem. There needs to be harsher fines in place for when these breaches happen. Make it cost incentive to beef up secirity.

Agreed. Right now it's primarily just bad PR for the companies to have info leeched, and that's about it. If it would cost them more in fines to have that happen than it would to implement decent security in the first place, then the problem wouldn't be so widespread.

For something like a health care agency it is almost a must. There is a TON of personal data stored in those systems. Otherwise, it should depend on how much sensitive data is held.  Sorry to hear you have to deal with it though, Sky.

You are going to see it more as they get the State exchanges set up for the ACA rollout, security testing goes till  Sept 30, the exchanges start Oct 1. Not alot of time to test well.