http://www.dallasnews.com/sharedcontent/dws/news/texassouthwest/stories/DN-txlottery_23tex.ART.State.Edition1.271af95.html By KAREN BROOKS The Dallas Morning News September 23, 2008 AUSTIN - A former Texas Lottery Commission computer analyst told investigators that he copied the personal data of more than 27,000 Texas lottery winners by accident, simply by downloading his own work files off his computer and taking them to his next job, according to arrest warrants. But the commission isn't yet working to change its information-technology security systems so that doesn't happen again, even inadvertently, officials say. Instead, the agency is waiting until after a felony criminal investigation into the case, in which a 39-year-old Austin man could be charged with possession of unauthorized information. "In a very general sense, we always look at our process," said commission spokesman Bobby Heith. "As in any business, we look at processes where we may or may not need to improve. Whether this is one of them or not, I'm not aware that there's any current process going on to look at IT security. The investigation will answer those types of questions." The names and Social Security numbers of 27,075 mid-level lottery winners – people who have won prizes from $600 up to around $1 million – were on the employee's hard drive. Also included were the names, Social Security numbers and, in a handful of cases, bank routing and account numbers of 639 current and former commission employees and 534 lottery retailers. [...] __________________________________________________ Register now for HITBSecConf2008 - Malaysia! With a new triple-track conference featuring 4 keynote speakers and over 35 international experts, this is the largest network security event in Asia and the Middle East! http://conference.hackinthebox.org/hitbsecconf2008kl/Received on Tue Sep 23 2008 - 22:06:54 PDT
This archive was generated by hypermail 2.2.0 : Tue Sep 23 2008 - 22:20:23 PDT