In this photo taken, Monday, Jan. 30, 2012. Nigeria secret service officers stand guards during a court hearing in Lagos, Nigeria. The Associated Press has learned on Thursday, Aug. 30, 2012, that personnel records of former and current members of Nigeria's top domestic spy agency, including home addresses and names of immediate family members, were leaked onto the Internet. The data about more than 60 employees of Nigeria's State Security Service remained easily accessible on the Internet for days. It also had details about the agency's director-general, including his mobile phone number, bank account details and contact information for his son. (AP Photo/Sunday Alamba)
Report: VA sent data over unsecured networks
Published: 07:09:10 PM, Thu 07 March 2013 UTC
WASHINGTON (AP) — A government watchdog says the Veterans Affairs Department has been sending sensitive data — including electronic health records — over unencrypted networks, making them vulnerable to theft or misuse.
The VA's inspector general says it has been common practice for the agency to send the unencrypted data to outpatient clinics and private contractors, contrary to federal rules that require a higher level of security.
The information included veterans' and dependents' Social Security numbers, dates of birth and other private health data. No security breach occurred.
The inspector general is recommending the agency put in place the necessary controls and train its personnel on understanding the importance of encrypting sensitive information.
VA officials say they agree with the report's recommendations and will take corrective action.
Tags:
ap, national security, veterans affairs department, recommendations, culture_politics, federal government of the united states, report, misuse, data, inspector general, sensitive information, security, internet, washington, common practice, theft, computer, identity theft, computer security, electronic health records, importance, agency, outpatient clinics, higher level, private contractors, dates, electronic commerce, dependents, social security numbers, government watchdog, va officials, corrective action, federal rules, sensitive data, private health data, unencrypted networks, unencrypted data, unsecured networks, necessary controls
