Consumer Law

Identity Theft Mostly Caused by Lost Laptops, Third Parties

By Kemnitzer, Anderson, Barron, Ogilvie & Brewer

Identify theft affected somewhere between 8 and 15 million Americans in 2005, according to Tom Abate's article in today's San Francisco Chronicle. One report just issued by the Federal Trade Commission estimated that identity theft struck about 4% of all adult Americans in 2005. Those numbers mean that identity thieves are twice as likely to target American consumers as are street criminals.

But another report issued last February estimates that the problem is much worse than the FTC calculates. The market research firm Gartner's study suggested that 15 million Americans had been victimized in the 12-month period ending August 2006. If these numbers are right, you're four times as likely to be an identity theft victim as to be a street crime target.

The bottom line is, no one really knows how much identity theft occurs in the U.S. And what knowledge we do have about data breaches is only possible because California and about 35 other states require companies to reveal when certain sensitive data are leaked. Congress has so far failed to pass any equivalent federal law.

How do identity thieves gain access to so much sensitive consumer information? According to private sector data security expert Larry Ponemon, half of the data breaches were due to lost laptops. Malicious employees accounted for another 9 percent. A whopping 40 percent of the breaches involved a third party--either an outsourcer, consultant or other business partner.

Full post as published by California Credit Law Blog on November 28, 2007 (boomark / email).