Email Mishap Leaks Google Staff Data (thestack.com)
An anonymous reader writes: Google has suffered a data breach which compromised the security of its employees, after the company's staff benefits vendor mistakenly sent an email containing sensitive data to the wrong recipient. Google has sent a formal apology to an undisclosed number of affected employees. The letter notifies of the data breach and advises staff to register for free identity protection checks and credit monitoring for the next two years. The document explains how the third-party company, which provides Google with benefits management services, sent the personal information to a benefits manager at another firm by accident. The data included staff names and social security numbers, among other sensitive details.
At work we use ssns to identify people in our system its not online it doesn't check that the number is valid and we don't actually care if its real or not.
The reason why we ask for the ssn is solely so we can find them in our system a year later when they come back. Because many people have absolutely no idea what their legal name is or don't care.
Name on id: "Fred jones"
What he says his name is: "Patrick star"
Oh I've changed my name 3 times in the last year what name do you have me under? Try smith, green, apple, bob.
*checks ssn* ah here we are "Natsu dragneel"
Client: oh I forgot about that one that was when I was with my 7th wife.
Give us something else we can use to persistantly keep track of our customers because names really suck.
Minimum threshold fixed. Thanks!