I received my VA letter yesterday
- IT TOPICS:Government & Regulation, Security, Storage
Yesterday a thin white envelope came in the mail from the Veterans Administration. At first glance, I thought it was about my student loans, but I quickly realized it was something a lot more important and potentially costly. I finally received notification from the VA about the loss of 26.5 million veteran's records. I was not in the least bit impressed by the VA's response.
If you'd like to see a reprint of what the letter says, check out Kevin Devin's post at In The Trenches. Or ask a couple of your neighbors; with the size of this breach, I'm sure more than a couple people in your neighborhood have received the same letter. You might check with members of your family too. This isn't a minor breach, it potentially affects almost 10% of the entire population of the United States. And the best the VA can do is send out a letter stating, "Authorities believe it is unlikely the perpetrators targeted the items because of any knowledge of the data contents." Do they really believe this? And does that matter?
This letter drove home for me how little the Veterans Administration really understands about what has happened and what they've done wrong. They continue to try and minimize the apparent impact of the situation by stating it wasn't really all that big of a deal and by making knee jerk reactions, like ending telecommuting. But these really aren't addressing the problem with what's already out there and how they're going to protect veterans from having their identities stolen. It's great to 'believe' that the perpetrators don't know what they've got, but the VA needs to take steps to make sure veterans are safe, even if the thieves really have figured it out. Sending a letter isn't enough.



