Analysis of Loss of Control Over Sensitive Personally Identifiable Information and Follow-Up Actions to Strengthen its Protection   [open pdf - 144KB]

"This memorandum provides the results of an analysis of two incidents involving the loss of control over Sensitive Personally Identifiable Information (SPII):1 the July 27, 2006, theft of an Office of Inspector General (OIG) laptop from a special agent's vehicle in Doral, Florida, and the April 24, 2006, theft of an OIG laptop from a hotel conference room in Orlando, Florida. As a result of these two laptop thefts, the OIG lost control over a large amount of SPII. Of particular concern was information on 138,000 individuals that had been collected in connection with Florida-based OIG investigations. Normally, these data would have been encrypted. However, due to a needed system upgrade, the data were not encrypted at the time of these thefts."