Slashdot Mirror
Offshored Identity Theft
Travoltus writes "The threat of increased misuse of consumer personal data by offshore criminals was first made publicly known with the UCSF Pakistani medical transcriber scandal. Then, in a logical progression of events, it was discovered that foreign criminal interests were offering money to offshored call center workers to surrender consumer data. Now that threat has been realized: Offshored call center staffers at Mphasis BPO have allegedly stolen £200,000 using United States customers' personal information. It is believed that Indian police reacted swiftly to catch the thieves, but only £12,000 has been recovered so far, and it is not really known who orchestrated this theft or where the rest of that money is now. It is also unknown as of yet how much of a mess this has created for the U.S. citizens who were victimized. Let's hope that the people whose information was stolen don't have to go through what other identity theft victims have to endure, to clean up their good name."
Why is identity theft by foreigners considered more scary that identity theft by Americans. I'd bet you $100 that the vast, vast, vast majority of credit card fraud on Americans is committed by their fellow countrymen[0].
[0] Or women.
Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
The worst part about stuff like this is that the system is set up in favor of the person stealing the information. There are what seems to be very few safeguards to prevent the theft of someone's information. However, when it's time to clean up the mess, those responsible for it, including companies that were mishandling the information, are nowhere to be found. Thus leaving the victim to spend excessive amounts of time and money clearing their "good" name. Just proves the only person watching out for you is yourself, so be careful who you trust.
Whatever you tink about Lou Dobbs, it's very irresponsible to just dismiss him as a racist.
Even "nationalist" is nonsense, he's merely pointing out one of the problems with unresitriced and unbalanced "unfair" trade. Now, you could argue this is a good thing, and we could point out the problems and have a discussion. But by labeling him a racist, the only thing you're trying to do is to "shut down" any arguments by coming up with ridiculous ad hominem attacks.
I'm an immigrant to this country, and I'm not a fan of outsourcing. I'm all for other immigrants from all over the world to continue coming here and contributing their talents to our local economies, but there is a problem when now people don't even want to become US residents, because they jobs are being drained away from here. We're about to face a serious crisis, when our technological workforce is being decimated by these companies. And there's nothing racist in pointing that out, nothing.
As for security, I don't think most if any people here are saying that a particular nationality is less trustworthy. But you'd be a fool if you don't recognize that some of the safety mechanism we enjoy in this country, are not as robust or even exist in other parts of the less developed world. As we deal with the poorest of nations, with our sensitive data, we have to be *extremely* careful. Already, there have been incidents of bribing by local crime syndicates in some of these countries to obtain data to steal identities. Can that happen in the US? Of course! But the question is, where is it more likely, and what are the protections we need to employ in these situations.
There's a rich discussion to be had on this topic, but please, try to come up with something better than "they're racist".
There is a remedy for handling this in the future for US citizens. We need to push our legislators to enforce it, which is obviously hard to do.
US Corporations are legally (criminally and civily) liable for the accuracy and protection of data that they collect on US Citizens.
This then needs to be negotiated into international treaties.
This would make a given company think twice about what information it really needs to be collecting, and how it will be protected. If the company wishes to outsource work, fine, that needs to be disclosed, and the company still remains liable for the protection of that data.
There need to be laws, and the laws must have teeth. This is a "service" that companies are carrying out "in the public trush." They need to be penalized for violations.