26.5 MILLION
VETERANS RECORDS STOLEN:
The Department of Veterans
Affairs (VA) has recently learned that an employee, a data analyst,
took home electronic data from VA, which he was not authorized to do.
This behavior was in violation of VA policies. This data
contained identifying information including names, social security
numbers, and dates of birth for up to 26.5 million veterans and some
spouses, as well as some disability ratings. Importantly, the affected
data did not include any of VA’s electronic health records nor any
financial information. The employee’s home was burglarized and this
data was stolen. The employee has been placed on administrative leave
pending the outcome of an investigation.
Appropriate law
enforcement agencies, including the FBI and the VA Inspector
General’s office, have launched full-scale investigations into this
matter. Authorities believe it is unlikely the perpetrators targeted
the items because of any knowledge of the data contents. It is
possible that they remain unaware of the information which they
possess or of how to make use of it. However, out of an
abundance of caution, VA is taking all possible steps to protect and
inform veterans.
VA is working with members
of Congress, the news media, veterans service organizations, and other
government agencies to help ensure that those veterans and their
families are aware of the situation and of the steps they may take to
protect themselves from misuse of their personal information. VA will
send out individual notification letters to veterans to every extent
possible.
Veterans can also go to www.firstgov.gov
to get more information on this matter. This website is being set to handle
increased web traffic. Additionally, working with other government
agencies, VA has set up a manned call center that veterans may call to
get information about this situation and learn more about consumer
identity protections. That toll free number is 1-800-FED INFO
(333-4636). The call center will be open beginning today, and will
operate from 8 am to 9 pm (EDT), Monday-Saturday as long as it is
needed. The call center will be able to handle up to 20,000 calls per
hour (260,000 calls per day).
Secretary of Veterans
Affairs R. James Nicholson has briefed the Attorney General and the
Chairman of the Federal Trade Commission, co-chairs of the
President’s Identity Theft Task Force. Task Force members have
already taken actions to protect the affected veterans, including
working with the credit bureaus to help ensure that veterans receive
the free credit report they are entitled to under the law.
Additionally, the Task Force will meet today to coordinate the
comprehensive Federal response, recommend further ways to protect
affected veterans, and increase safeguards to prevent the reoccurrence
of such incidents. VA’s mission to serve and honor our nation’s
veterans is one we take very seriously and the 235,000 VA employees
are deeply saddened by any concern or anxiety this incident may cause
our veterans and their families.
VA
is asking veterans service organization to help. We should be
able to respond to most inquiries using the "Frequently Asked
Questions" provided by VA:
1-
I’m a veteran, how can I tell if my information was compromised?
At this point there is no
evidence that any missing data has been used illegally. However, the
Department of Veterans Affairs is asking all veterans to be extra
vigilant and to carefully monitor bank statements, credit card
statements and any statements relating to recent financial
transactions. If you notice unusual or suspicious activity, you should
report it immediately to the financial institution involved and
contact the Federal Trade Commission for further guidance.
2-
What is the earliest date at which suspicious activity might have
occurred due to this data breach?
The information was stolen
from an employee of the Department of Veterans Affairs during the
month of May, 2006. If the data has been misused or otherwise used to
commit fraud or identity theft crimes, it is likely that veterans may
notice suspicious activity during the month of May.
3-
I haven’t noticed any suspicious activity in my financial
statements, but what can I do to protect myself and prevent being
victimized by credit card fraud or identity theft?
The Department of Veterans
Affairs strongly recommends that veterans closely monitor their
financial statements and visit the Department of Veterans Affairs
special website on this, www.firstgov.gov
or call 1-800-FED-INFO (1-800-333-4636).
4-
Should I reach out to my financial institutions or will the Department
of Veterans Affairs do this for me?
The Department of Veterans
Affairs does not believe that it is necessary to contact financial
institutions or cancel credit cards and bank accounts, unless you
detect suspicious activity.
5-
Where should I report suspicious
or unusual activity?
The Federal Trade
Commission recommends the following four steps if you detect
suspicious activity:
Step 1
– Contact
the fraud department of one of
the three major credit bureaus:
* Equifax: 1-800-525-6285;
www.equifax.com;
P.O. Box 740241
,
Atlanta
,
GA
30374-0241
* Experian: 1-888-EXPERIAN
(397-3742); www.experian.com;
P.O. Box 9532
,
Allen
,
Texas
75013
* TransUnion:
1-800-680-7289; www.transunion.com;
Fraud Victim Assistance Division,
P.O. Box 6790
,
Fullerton
,
CA
92834-6790
Step 2
– Close
any accounts that have been tampered with or opened fraudulently
Step 3
– File a
police report with your local police or the police in the community
where the identity theft took place.
Step 4
– File a
complaint with the Federal Trade Commission by using the FTC’s
Identity Theft Hotline by telephone: 1-877-438-4338, online at www.consumer.gov/idtheft,
or by mail at Identity Theft Clearinghouse, Federal Trade Commission,
600 Pennsylvania Avenue NW
,
Washington
DC
20580
.
6-
I know the Department of Veterans Affairs maintains my health records
electronically; was this information also compromised?
No electronic medical
records were compromised. The data lost is primarily limited to an
individual’s name, date of birth, social security number, in some
cases their spouse’s information, as well as some disability
ratings. However, this information could still be of potential use to
identity thieves and we recommend that all veterans be extra vigilant
in monitoring for signs of potential identity theft or misuse of this
information.
7-
What is the Department of Veterans Affairs doing to insure that this
does not happen again?
The Department of Veterans
Affairs is working with the President’s Identity Theft Task Force,
the Department of Justice and the Federal Trade Commission to
investigate this data breach and to develop safeguards against similar
incidents. The Department of Veterans Affairs has directed all VA
employees complete the “VA Cyber Security Awareness Training
Course” and complete the separate “General Employee Privacy
Awareness Course” by June 30, 2006. In addition, the Department of
Veterans Affairs will immediately be conducting an inventory and
review of all current positions requiring access to sensitive VA data
and require all employees requiring access to sensitive VA data to
undergo an updated National Agency Check and Inquiries (NACI) and/or a
Minimum Background Investigation (MBI) depending on the level of
access required by the responsibilities associated with their
position. Appropriate law enforcement agencies, including the Federal
Bureau of Investigation and the Inspector General of the Department of
Veterans Affairs, have launched full-scale investigations into this
matter.
8-
Where can I get further, up-to-date information?
The Department of Veterans
Affairs has set up a special website and a toll-free telephone number
for veterans which features up-to-date news and information. Please
visit www.firstgov.gov
or call 1-800-FED-INFO (333-4636). (VA Press Release - May
22, 2006)
VA
ADDS FORMER POW AND PURPLE HEART DESIGNATIONS TO THE VETERANS ID CARD:
VA has added Former POW
and Purple Heart (PH) designations on its Veterans Identification Card
(VIC). These designations are in addition to the Service-Connected
designation already displayed on the VIC.
The cards have a photo of
the veteran on the face of the card and identifying information
embedded using bar code and magnetic strip technology. Cards are
issued to veterans enrolled in the VA health care system and are used
for identification and administrative processing purposes. The VIC
cannot be used as a credit or an insurance card and it does not
authorize or pay for care at non-VA facilities.
Former Prisoner of War and
Purple Heart recipients who are currently enrolled with VA and have a
current VIC photograph on file will automatically be sent an updated
VIC commencing early May, 2006.
Former POWs and/or Purple
Heart recipients who are enrolled but have not yet been issued a VIC
may request the new card by visiting their local medical center to
have their photo taken. Card processing will take five to seven days
once eligibility is verified. VA encourages any Former POW or Purple
Heart recipient who has not yet enrolled in its health care system to
do so and once enrolled to request issuance of a VIC.