Thread: Programer accused of hacking driver's license files

http://www.accessnorthga.com/news/ap_ne ... p?ID=60627

AP NewsBreak: Programer accused of hacking driver's license files

The Associated Press - ATLANTA

A computer programmer for a sensitive state agency, who apparently was hired without undergoing a background check, has been charged with computer intrusion and theft for accessing Georgia driver's license files without authorization.

The Georgia Technology Authority said Asif Siddiqui was arrested April 28 at the agency's offices near the state Capitol after the agency discovered he had logged into the database outside of work hours without having a reason to do so.

"He used to work on this system but there was no reason for him to be involved in any way" when the intrusion was found, said Tom Wade, the agency's director.

The agency has no idea how many files were accessed or what, if any, personal information may have been compromised, Wade said. The files potentially included names, addresses, home telephone numbers and Social Security numbers of thousands of Georgians.

An investigation by the Georgia Bureau of Investigation will help determine if any other state databases were tapped and potentially compromised, Wade said.

"Because of the confidential nature of the files and because he was going in during off-work hours and he had no reason to be doing it, we contacted the attorney general and the GBI and asked them to investigate," he said.

The Georgia Technology Authority is the state's data arm, managing its databases and communications systems.

Siddiqui was hired to work in the agency in May 2001. Wade said Siddiqui apparently wasn't required to undergo a background screening because he had previously worked for the Department of Natural Resources and the Department of Human Resources.

Wade said he intends to tighten security at the agency.

"We have been reviewing and putting together tighter internal controls," Wade said. "We're limited access on a need-to-know basis, checking our logs and monitoring."

No one answered the telephone at a home listing for Siddiqui on Friday.

His name gives him away. Is he a legal citizen, or here from some islamic country on a visa pass? I am sorry, but I smelled a rat right away when I first started reading the article.

I dont think it matters if he is here on a visa or not. I think it shows how vulnerable our databases are and yet they want to put even more information in them. They will still use cheap labor on these systems brought in from out of the country and these people can access the information and sell it on the black market. Even worse they could change a persons picture and print out a new id card with an American Name and their picture. These people don’t even know how many records were accessed

The agency has no idea how many files were accessed or what, if any, personal information may have been compromised, Wade said. The files potentially included names, addresses, home telephone numbers and Social Security numbers of thousands of Georgians.

What's wrong with these employers? Didn't anyone consider that it is very important that personal information isn't at the finger-tips of some foreign visa student or outsourced visa computer employee? Anyone that deals with social security numbers, banking, health, life, home and car insurances, and drivers licenses, and visas, should be citizens.
THERE HAVE TO BE LAWS, THAT WOULD BAR ANY FOREIGN PERSON, ACCESS TO ANY INFORMATION THAT DEALS WITH THE IDENTIFICATION OF AMERICAN CITIZENS. PERIOD!
Even then, I would want to have proof of where that person is from and the longivity of their American citizenship, before I would ever employ them!

Originally Posted by butterbean

What's wrong with these employers? Didn't anyone consider that it is very important that personal information isn't at the finger-tips of some foreign visa student or outsourced visa computer employee? Anyone that deals with social security numbers, banking, health, life, home and car insurances, and drivers licenses, and visas, should be citizens.
THERE HAVE TO BE LAWS, THAT WOULD BAR ANY FOREIGN PERSON, ACCESS TO ANY INFORMATION THAT DEALS WITH THE IDENTIFICATION OF AMERICAN CITIZENS. PERIOD!
Even then, I would want to have proof of where that person is from and the longivity of their American citizenship, before I would ever employ them!

I agree, but currently there are banks, government agencies, student loan companies and many others that are outsourcing with foreign companies to process highly sensitive information. they will do the same thing with the REAL ID except they will have all of your information in one place which will make it easier for crooks to steal your id.