Clear Program = Clear Text

The TSA is a little miffed, and I am sure a few other people are as well.  Why?  Because Verified Identity Pass, Inc. had a laptop go missing that contained the sensitive information of 33,000 applicants for the Clear program.  If you don't know about Clear, it is basically a program that performs a security pre-screen of applicants and gives them a "high-tech card" (their words) to get through airport security faster.  So you can imagine what kind of information was on this laptop.  

According to the article, the "TSA has suspended new enrollments in the program" until "all affected applicants" have been notified and Verified Identity Pass "has installed encryption on all its computers".

Now, I am sorry, but the question has to be asked.  Yes, the same question that has been asked for the last 2-3 years that this has been happening on a fairly frequent basis.  WHY WASN'T THE LAPTOP ENCRYPTED?!?! Sorry for the shouting, but sheesh, golly, gee-wiz, and holy crap, Batman!  This is ridiculous!

And want something a little more ironical?  Look at this excerpt from their privacy policy:

3. INFORMATION SECURITY

Clear and its subcontractors, pursuant to legal agreements, have a comprehensive information security program to ensure the privacy of Clear applicants and members as well as the integrity of our systems. We apply ID's and passwords to insure that access to systems and data is only on a need-to-know basis. We use encryption (a strong data coding process) for all program sensitive data communications. We apply firewalls to guard against outside intruders. We conduct periodic data security audits to check that the rules are being followed. TSA also conducts periodic audits to assure that we comply with their extremely high standards of data security. We have a continuous update process for Anti Virus protection and implement Operating Systems Security updates for our network infrastructure. (EMPHASIS ADDED)

Oops...  Here's another one, straight from their CEO:

Second, we think we have a special responsibility to protect your privacy. Yes, we are using biometric identifiers such as fingerprints and iris images. Yes, your enrollment application will be submitted to the government for a basic security threat assessment before we can issue you a Clear card. But we do not believe the process and the questions stop there. We know that this kind of new idea and new process is bound to make many people uneasy about what we are doing with their personal information, especially at a time when every day seems to bring new headlines about identity theft. (EMPHASIS ADDED)

HAHAHA!!!!!   Headlines... you're in 'em.  Sorry, couldn't resist.

 UPDATE: The laptop was found in their offices.  Looks like it was just lost, even though they are still investigating to make sure it wasn't stolen.