« Identity theft or bureaucratic bungling? | Main | The Zen of identity theft - the student has become the master »

UCLA hacked, but no free credit monitoring

UCLA just admitted that not only had the personal information of around 800,000 students, former students, faculty and even sudent parents been compromised by a hacker, the hacker had undetected access to the University's computer systems for at least a year.

Of course we probably wouldn't even have heard about the incident if it weren't for the new data protection laws that require orgizations to publicly disclose data breaches. And while the University offered those affected some canned advice on what they can do if they're worried about becoming a victim of identity theft as a result of the breach, the college did not offer the usual "one year of free credit monitoring for everyone" that has also become a stock response to embarrassing data breaches.

Maybe they figured that too few victims would take them up on the offer to bother - which might have been a good reason to offer it to everyone while actually spending very little in the end.

MSNBC reporter Bob Sullivan wrote an article earlier this year that highlighted how few potential victims actually take up offers of free credit monitoring after they receive one of those dreaded breach disclosure letters.  In some of the most notorious breaches, including LexisNexis, Choicepoint, Citibank and Wells Fargo, only around 6% of people offered free credit monitoring actually took them up on the offer.

And the reason? According to research firm the Ponemon Institute, most consumers still either don't believe the offers are anything other than a gimmick, or don't trust the provider of the service.

A sad but understandable indictment of the state of the credit monitoring industry, and of a security solution that I think is one of the most valuable available to every consumer.

Posted on Wednesday, December 13, 2006 at 01:52PM by Registered CommenterNeal O'Farrell in | CommentsPost a Comment

PrintView Printer Friendly Version

EmailEmail Article to Friend

Reader Comments

There are no comments for this journal entry. To create a new comment, use the form below.

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>