California Court Posts SSNs, Medical Records 117
Lucas123 writes "California's Riverside County Superior Court's Web site is serving up document images containing SSNs and detailed medical records relating to civil cases, according to a couple of privacy advocates. All of the documents are free to anyone who knows where to look for them. 'Searches done on the court's Web site turned up various documents related to civil cases that contained sensitive information. Included were complete tax filings, medical reports pertaining to cases handled by the court, and images of checks complete with signatures as well as account and bank-routing numbers.'"
Use the source, Luke (Score:1, Troll)
<meta name="GENERATOR" content="Microsoft FrontPage 6.0">
Ah, a clue!
Re: (Score:2)
Troll?
Either way, this is stuff that Epic Systems of Verona, WI has already done. Their software runs at a lot of hospitals, from the check-in desk to the little dumb terminal in the doctor's office that brings up your charts and records.
They also have a "dashboard" application where you can check your medical records and schedule appointments online. I don't know of any hospital near me that uses that app, but some hospitals advertised the online features they got from Epic on television.
BZZZT... thankyouforplaying... (Score:2)
The server http://www.riverside.courts.ca.gov/ [ca.gov] is just the main directory for all of the court's web presence. You did notice that there aren't any personal documents there didn't you?
The court records are served up from: http://public-access.riverside.cou [ca.gov]
Re: (Score:2)
This line in parent AC is what caught my attention:
Microsoft sees a future in which a physician in a hospital calls up a patient records and instantly sees a dashboard of relevant information drawn from all the patient records going back many years
I thought it was hilarious - he's spinning it as Microsoft has some dastardly for FrontPage to serve up your medical records over the tubes when there are companies out there that actually earn their bread and butter doing just that.
Individuals are the only ones who care (Score:4, Insightful)
Enter legislation (Score:4, Insightful)
Which is why we need legislation that will fine them for releasing that information.
Another idea would be to demote the person who made the decision to post that stuff publicly to Official Identity Theft Aftermath Cleanup Technician.
Re: (Score:1)
Re:Enter legislation (Score:4, Funny)
Re: (Score:3, Interesting)
Doesn't matter if you can't prove
Re: (Score:1)
Much better to make the company who issues credit to an impersonator responsible for the credit they issue rather than the person who matches the mystical, enchanted number (I don't know what else could possibly make a number secure) that was used for identity.
Re:Enter legislation (Score:5, Informative)
You know, just because something can be done, doesn't mean it is necessarily to be done. This guy may want to take a look at Maryland's case search engine [state.md.us] to see an example how someone with some sense would do it. Jeebus.
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Now, I realize there's a qualitative difference between Internet accessibility and walk-in accessibility, but I do think we need to address the larger privacy concerns.
Re: (Score:3)
Re: (Score:2)
In many cases, it's also possible to simply call or fax the court office and ask for the information to be sent to you, so you don't even need to poke through the information yourself.
That said, I don't think it's either possible or reasonabl
Re: (Score:1)
With a government which already holds itself at immune to its own courts and its own laws as inapplicable to itself, this would be useful exactly how?
The government is impotent and powerless. WalMart can get away with contempt of court as easy as you get away with jaywalking and everyone increasingly knows it.
Welcome to breaking point.
Re: (Score:2)
Identity theft is really pretty easy, in large part because everyone from the government to the local grocer can get away with playing fast and loose with whatever data of yours they have on hand. Fines won't stop that, especially if the payoff is larger than the fine anyway.
We'd be better off if we stopped locking up rinky-dink hop heads and replaced them with the aiders and abettors of identity thieves.
Re: (Score:3, Insightful)
WTF? We're in bad shape when a "There should be a law..." post gets rated Insightful
Making a new law isn't going to help anything. It's against the law to kill people and smoke pot, but it happens all the time. Sure, the companies will pay some tiny fine as punishment, but that doesn't really solve the problem of "Your private info was just given to scumbags".
The only way to make companies stop losing information
Re: (Score:2)
Re: (Score:2)
True, boycotting won't work for the government. But, the government employees didn't get there by accident. People voted for them, or voted for the people who hired them. Somewhere up the chain, some elected official is responsible for the people who fucked up, and they should be fired, impeached, voted out of office, or otherwise removed. If losing data means a person loses their care
Re: (Score:1)
Someone need to mail them to the wall for disclosure of medical documents.
Re: (Score:3, Interesting)
This is just the tip of the iceberg of the information flood. As much as people hate the idea here, I think that there is a need for a federal ID piece that can be used to positively identify someone, wit
Re: (Score:3, Interesting)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Lastly, I'd also challenge your belief that any positive ID will be used to control (in the Orwellian sense) the population. Jews snuck out because people didn't know their race when the presented f
You used to be able to get a passport without ID (Score:1)
The intent was so Ma The Farmer's Wife who never had a birth certificate or driver's license could get a passport even if she'd lost her family Bible and birth records in a fire and the doctor or midwife who birthed her was also dead. She could round up a few people who knew her for a long time and get a passport.
These days, with very few Americans under 50 lac
Re: (Score:2)
Same problem with exclusive use of biometrics: If someone manages to forge your biometric signature, you're completely hosed because you can't change it.
Re: (Score:2)
The point is that if someone gets a hold of your personally identifying information now, you're boned as well. Why not make the process by which that information is obtained as hard as possible?
There are plenty of services that don't need personally identifying information, but there are some that do. Encrypt information to be sent with your private PGP key, and the oth
Re: (Score:2)
That's why some courts redact such information (Score:2, Informative)
This also applies to evidence in criminal cases too. If I defraud 10 people's bank accounts at ACME Bank, those account numbers may be redacted depending on the court and whether the accounts are still active. If I'm on trial for k1dd13 p0rn or stealing nuclear secrets you can bet the main evidence will be sealed from public view.
Re: (Score:2)
Re: (Score:2)
Yet when its just some private citizen's information plastered all over the place it is no big deal because it's "public information".
Re: (Score:2, Interesting)
Oops! Our bad! (Score:1)
Re: (Score:2)
I haven't read FOIA in its entirety or anything, but it seems to me it would allow for redacting to comply with HIPAA as well.
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Re:Oops... FOIA vs HIPAA (Score:1)
For example:
I used to be a full time preventer of natural select (firefighter/paramedic) working for a city government. Under the FOIA they were supposed to release out information excluding a few tidbits like SSN, medical screening, etc. However, it was only applied when it benefited the city. If a reported wanted to inspect an employee's file, if the reporter was a city friendly one, they wouldn't remove or blank out any personal info
Meanwhile.... (Score:4, Interesting)
SCrubing SSN's is not the answer (Score:4, Insightful)
If you have nothing to hide.... (Score:1)
Well I DO have something to hide *from criminals.*
The data that the government monitors gets stored and handled by an incompetent IT staff overseen by decision-makers who are even less competent. The level of data tracking that the government insists it is justified in doing directly harms the people being tracked, not because of
Re: (Score:2)
What would replace them?
Re: (Score:2)
The removes them from the one place they are most abused.
Make it a problem for the corporations to deal with.
When one of the CSIDs(CreditScoringID) is stolen, it only causes issues with the Credit scoring. You don't need to worry about your whole life being tied to that one number.
Since you can't get a new SSN (usually) once someone has it and can tie it to you, your whole life is comprised.
You Drivers license should be your ID.
Re: (Score:3, Insightful)
Furthermore when an ID is stolen, the company that let the theif sign up for credit in someone elses name should be fined and scrutinized for further possible fraud. We need to make the companies
Re: (Score:1)
Re: (Score:2)
Re: (Score:3, Interesting)
This is a common misconception. There are honest duplicates within the system. I'm not talking about the "undocumented worker" down the street. Duplicate SSN's are issued. You need some other information such as a name to make it a unique identifier.
There are almost 304,000,000 people in the US. If they were unique, that would mean that a third of the total possible SSNs must be used just for the current living population. Count everyone who has died since 1936
Cost/Benefit. They don't cost, and do benefit. (Score:3, Insightful)
Strong and secure methods of identification and verification need to make their way into the financial world, but changing the existing infrastructure is expensive, so it isn't going to happen. At least, not until some enterprising individual has their identity stolen and successfully manages to sue the lending industry for fraud...
For those of you who know of anyone who's a victim (Score:1, Informative)
2. You are entitled to at least ONE free credit report per year and depending on your state maybe more. Federal trade Commision's site [ftc.gov] is the ONLY truly free credit report. Those other sites are trying to sell you other stuff and they're not on the
Re:For those of you who know of anyone who's a vic (Score:2)
Re: (Score:1)
Absolutely- if you're looking to prevent identity theft, rather than learn about it after the fact, a security freeze (sometimes called a credit freeze) is the way to go.
Credit monitoring is expensive and does nothing to stop ID theft. Sure, if somebody does use your identity fraudulently, you'll get an e-mail about it but the damage is already done.
You're paying $180/year just to learn you've been screwed sometime after it happens!
On the other hand, security freezes locks your credit reports with a PI
TransUnion is the easiest??? (Score:1)
Easily predicted (Score:3, Insightful)
Hey public record (Score:2)
Re: (Score:2)
Court documents are sealed all the time. There is no reason why medical information and SSNs should not be sealed or redacted.
Government Logic - SB1386 (Score:2, Interesting)
HIPAA (Score:1)
The only fallback that people have legally is that California privacy bill that's mentioned in section 12 of PCI.
Court Information is public record (Score:4, Informative)
While it is unfortunate that such things as SSN's are being made public, the hard reality is that anything contained in a court record is public information.
Open access to government is a two way street, and is meant to prevent corruption and give the public a clear view what their government is doing.
On a side note, my county also publishes court records on the internet that are public information. However, it is limited to the court schedule, case#, charge, and attorney schedule.
The fact that this schedule is public information is still not a concept some people are aware of. Ive heard stories from court employees of upset people coming in and demanding that their DUI case be taken down from being publicly viewable. Unfortunately for these people, the law says otherwise.
I even have personal experience in some of the reactions people have to this publicly available information after I posted a link to the county courthouse on one of my websites. A Company called Caton Commercial [willcounty...tcourt.com] even went to far as to have their attorney draft a cease and desist letter threatening me with legal action, and demanding that I remove this linked information, and turn over my legal domains to them to stop this 'knowingly libelous' action. Although, Im not sure that they thought through how they were going to present to a judge their case that the courts own website schedule was the source of this so-called libelous information. Like every other company before that has failed to grasp the concept of the internet, all the attention this brought to the linked information was a lovely demonstration of the 'Streisand Effect'. Once again, adding more weight to the phrase 'more dollars than sense'.
Re: (Score:2)
Re: (Score:2)
I agree with you.
I also agree with the google filter that knows that its not 'google-bombing' when the hyperlinked word is actually contained in the website that is being linked to.
Violation of federal law: (Score:5, Informative)
Social security account numbers and related records that are obtained or maintained by authorized persons pursuant to any provision of law enacted on or after October 1, 1990, shall be confidential, and no authorized person shall disclose any such social security account number or related record.
So I really can't imagine the court can defend this in any way at all.
Re: (Score:2)
And you'll note that "pursuant to any provision of law enacted on or after October 1, 1990" portion. Generally these filings are based on law going a lot further back than that.
Sorry to burst your bubble on this.
Amateurs ... (Score:3, Funny)
Just to see how it's done, have a look at the way the Italian Government handled things (http://news.bbc.co.uk/1/hi/world/europe/7376608.stm).
See? Now *that's* what I call disclosure. Those piddly efforts in California don't even come close.
the system needs to change (Score:2)
Re: (Score:2)
One word - (Score:2)
Somebody's in some DEEP SHIT over that. Iinm a judge can't order that a federal law be broken unless that law has been deemed unconstitutional.
Nothing To Do With HIPAA (Score:2)
HIPAA is the Health Insurance Portability and Accountability Act of 1996. It regulates Health Insurance. It contains a Privacy Standard that regulates how Protected Health Information (PHI) may be used. A little piece of it says that your SSI# can't be used as your ID number in health insurance. There are still lots of legitimate uses for that number both in and out of health insurance.
Nothing in HIPAA has anything to do with the court system. I want court records to be public documents. I want un
Re: (Score:1)
Now, if downloading patient records from a court website isn't
Re: (Score:2)
Re: (Score:2)
Why do we tolerate the civil court system? (Score:2, Insightful)
If you have ever been unlucky enough to be involved with a lawsuit, you know how greedy and "entitled" these "officers of the court" are.
Re: (Score:3, Insightful)
If you are going to court in CA (Score:2)
Public Records (Score:1)
Add to that the problem of Public Records - if you charge to access them (presumably to limit access), they're no longer public. Public Records also have all the other problems
Needle in a haystack (Score:2)
Haven't these people heard of computers? You know, those things you use to rapidly search for digital needles in digital haystacks?
Re: (Score:2)
Too bad these kind of hay stacks can be searched in seconds.
Remember kids, wikileaks=wrong, us courts = OK (Score:3, Insightful)
It's perfectly ok though for the federal government to actually do it.
Overblown much? (Score:2)
I'll bet I can find more social security numbers and bank account numbers from my apartment dumpster than is on t
Re: (Score:2)
It is not overblown, IMHO, and the responsible people should be canned! There should be laws against this also. This includes corporations that do this. Like maybe jail time for aiding a thief!
Re: (Score:2)
Maybe I still have more faith in humanity t
Re: (Score:2)
You have to much faith in humanity. Obviously you haven't seen the price of gas in the US, greenhouse issues and the lovely war that our oh so faithful president has gotten us into. But that is just MY opinion and I'm sure lots of people will disagree, and I usually call them dumb!
Sue them. (Score:2)
There is no two way street here. There is no reason we can't have an open government without web cams in our toilet seats. Do not be rediculous.
It doesn't take a rocket scientist to know the risks. If it were anyone else they would surely accuse them of intentional endangerment.
Why not make everything public? (Score:1)
Our information is out there. It is getting leaked. It is being rampantly abused. Why not just make all of our information public?
Why note create nice, neat databases with comfortable user interfaces that can query all of your, currently, personal information? And apply this to *every* one and *every* organization. No clauses for 'national security'. Everyone gets to know everything about everyone whenever they want.
Works well with cameras everywhe
Look, we found something else to complain about! (Score:1)
This is an example of a government agency trying to make public information available to the public. All of the cases shown are civil cases which have been filed by persons in the court. All of the information was given to the court by the persons involved because of the the civil cases they started. The information contained within the documents is pub
Re:Look, we found something else to complain about (Score:1)
Re: (Score:1)
Re: (Score:1)
HIPAA is important too... (Score:1)
ANALOG Identity Theft (Score:1)
Seems a local bank (one that apparently doesn't scan in all their checks before shipping them out to a check-processing house) gathers up all the negotiable instruments (checks, mostly), puts them in a pouch and gives them to a bonded courier.
On one particular day, the courier stopped off somewhere during the not-so-swift completion of his appointed rounds. And, while s/he was out
Video re Riverside Court (Score:1)