My story starts in the year 2000 when I had a bit of a argument with a head of a I.T. department for a university over credit card security online. To prove my point, I had to put my money where my mouth was and just make a attempt to show exactly what I was talking about. So I let the I.T. pro pick a random site with eCommerce. I would have a day to show credit card numbers with expiration dates and personal info. I really thought my timeline was a bit stiff as I was a very busy person at the time but… with minutes I had the info printed out as proof. I had made my point but did never mention it again as I had always feared there would be those that might strong arm someone who had knowlage of how to do such a thing. So no rubbing it in would be allowed.
What I did was to use that sites internal database by using the online search in a overt way as I was taking a guess as to where it would be found and that the two were on the same server and was correct with the first try. I dumbfounded myself in amazement. Many folks were hacked in those days and never knew it until they were arguing with their credit card co that they did not make those charges that were showing up on their bill.
Now we have taken many lessons from those early days and one would think that you can’t have easy pick’ns anymore. Think again. Our servers have gotten much more complex, and with complexity comes more services (functions ability of the server) and with more services comes more security holes. There are some security holes that have been around for 10 or more years and are just now being discovered. Problem is the hackers had knowlage of them long before they were publicly discovered either by accident or after witnessing a hack live.
Just in the past year, public announcements of data breaches of credit card number and personal info lost to hackers is at a all time high with no end in site.
This is to fail to mention the ones that happen that we do not hear about or have yet to hear about.
Major Breaches Starting with Target in Nov 2014 with others to include Morgan Stanley Chase Bank, SuperValue, Home Depot, Dairy Queen, K-Mart and the list is much broader with regional operators. Many more have been hacked and are yet to discover it. Some try to keep it deniable so they do not have to announce anything. You never discover what you fail to look for even if it is staring you in the face.
It is conceivable that the majority of Americans have had at least one account breached in the past year and have yet to know or feel the ramifications of it.
Chains are like security, and are only as strong as their weakest link. Today’s security chains have broken links to start with. But that is nothing new.
Please read this from a writer at the infamous WIRED Magazine who’s entire life was deleted in a hour and was done in simple ways.
There is several things to consider that retailers will not like to hear of.
“Stop warehousing data” – It is inevitable that you will be hacked. What reason do you have for keeping data around about your customers when the cost of it is ultimately paid by that customer in many ways, especially credit card numbers. Data Stored will always be Data Hacked at some point. It is valuable to many folks both criminal and to data mining companies that we don’t even know what they have on you unless you are looking to buy it and do so.
Granted, most of the more recent hacks have been from a malware that is capturing live data or very recent data but many other hacks are simply copying the contents of databases where it is stored.
After a credit card transaction is complete, only the transaction number should be stored with your personal info and that personal info should not be married to that transaction info 90 days after they have been paid for the transaction by the issuing bank. This is valuable info to the retailer that they did not have to pay a data mining company’s for and they can sell or trade it for other data.
They always like to “Get To Know You Better” about your shopping and spending habits. They would like to make you not just a “predictable shopper”, but one that can be easily “baited” if you know when, where and how much to bait each person. Those efforts seem to “Pay Off” and are getting better all the time with the more data they collect and hold. That is why it is so valuable to retailers and even politics and criminals (one in the same ??). This is how so many company’s you never herd of are making a very good living just collecting, warehousing and selling it.
The big problem here is that you are being judged by it and you don’t know who has it or what it is and have no way of knowing if it is correct.
Corporate America and YOU need to be sure it is far more costly to repair damage when breaches happen than to do the right thing in doing much more in protecting it. But you do need to have something to say about “what data” of you is being sold and “specifically to who” and “for what purpose” and give you a chance to say something about it’s accuracy beforehand.
It should be a given that Data Mining Company’s should not be allowed to exist in their present form if you think about privacy and your rights to know what others are judging you on without your knowlage. Imagine not being able to get a copy of your credit report to check for accuracy.
After all… some of the data could be about medical purchases you made for someone else ( a violation of HIPA medical privacy ) and in the future or possibly even now, you may be judged harshly for it for a job or life insurance or something similar and not know it. This is only one example of how data mining can and will hurt you.
While most of you complain about what the government is listening in on in our communications, you are missing out on the really big one that has been going on for many more years. I don’t fear my government as much as I fear Corporate America.
I’ll bet when data miners are hacked, you will never hear about it !
Yes, Data and Security have nothing in common. Only that some data is slightly more secure than others. Any data that just sits there is a very good easy target. If it is good enough to store for a while, it is very valuable to someone !
Europe seems to have it right in some ways… they are pushing for “The Right To Be Forgotten”.
Google that to learn more.