CalPortland Employees at Risk for Identity Theft

Employer error could cost employees and families untold financial loss.

In June, CALPORTLAND (www.calportland.com) issued a letter to employees: “In May 2009, we were made aware of a theft of a Company laptop containing data files, some of which contained some sensitive employee information (e.g., name, address and Social Security number) for certain employees. We have reason to believe your personal information may be included in the stolen data files. “We have no evidence that the stolen computer was targeted for its particular information or that the thief is either aware of or intends to use such information. However, because we take the issue of your confidentiality very seriously, and in order to safeguard you from identity fraud, we have engaged Kroll Inc., the world’s leading risk consulting company, to provide you with access to its ID TheftSmart service at no cost to you.” The letter is signed by Edward Owens Senior Vice President, Human Resources and continues to detail services offered (free to employees) by ID TheftSmart. Elizabeth Eagan-Cox, spouse of a CalPortland employee says, “The coverage CalPortland has offered is not being provided to employee spouses. This is an error that could leave employees and their families at risk for identity theft and fraud. In this age of easy access to free public records, it’s easy to obtain personal information about a person through their spouse. I called Edward Owens at CalPortland and explained their oversight could cause employees and their families severe financial problems. I told him that CalPortland should do what is ethically right, and provide the same ID TheftSmart coverage to spouses free of charge. Mr. Owens never answered my calls, so I left a voice message and then sent him an e-mail. He has not replied. That was June 4th. “It infuriates me that CalPortland’s error leaves employees in the dark and at risk. The aforementioned letter does not mention when or where the theft occurred and CalPortland will not answer employees’ questions to name which files were stolen. CalPortland has numerous plants and offices in the U.S., I guess we must assume that every employee is at risk. I cannot but wonder:  Why was a company laptop computer containing sensitive data left in a public location vulnerable to theft and why won’t the company be straightforward with the details surrounding the theft?  How can CalPortland not realize that regardless of the reason for the theft, employee information, especially Social Security numbers, is a treasure trove of black-market gold?  Are CalPortland executive officers ignorant of the fact anyone using free and legal access to public records can obtain personal information about an individual by using the name of a spouse? “Example: From the comfort of my own home and using free, public Web sites I spent twenty minutes researching Edward Owens. My results include: his home address, photos of his home, home phone number, spouse’s name, previous residences outside of California, where he and his spouse went to college (he is class of 1980, she is class of 1982), purchase value of his residence in 2006; and property tax. Imagine the damage that could be done if I had his Social Security number dropped into my lap! “Given the easy access to personal information, and potential for harm when information includes a Social Security number: How in the world can CalPortland not acknowledge that their error is problematic to employees and their spouses? C’mon, CalPortland, don’t half-step your damage-control! Do right by your employees and provide free ID TheftSmart coverage for their spouses!” Elizabeth Eagan-Cox e-mail: ElizabethEaganCox@yahoo.com CalPortland: www.calportland.com Edward Owens, Senior V P, H R: eowens@calportland.com