Yesterday, we learned of yet another data security breach: 15,000 current and former New York MTA employees had their personal data exposed on a CD that was found in a CD drive that had been refurbished and subsequently sold. The employee data on the CD was easily readable, but fortunately for all concerned, the buyer of the CD drive was a technology security official who happens to work for a New York City Transit vendor--and who reported what he'd discovered. People are not always that lucky when their personal data pops up in unexpected places, whether by design or accident.

Continue reading →