The theft of a laptop containing Social Security numbers of Nashville, Tennessee, area voters is expected to cost local officials about $1m as they roll out identity-theft protection to those affected.
County officials say that thieves broke into Davidson County Election Commission offices on the weekend before Christmas, smashing a window with a rock and then making off with a $3,000 router, a digital camera and a pair of Dell Latitude laptops containing names and Social Security numbers of all 337,000 registered voters in the county.
County election officials began notifying residents of the breach on 2 January, and the local government is offering victims one year of free identity theft protection from Debix Identity Protection Network.
Debix says that 25% to 35% of victims of this type of breach typically request this service. With the city paying Debix just under $10 per account, the price tag for the laptop theft is expected to be in the $1m range.
Since state data breach disclosure laws went into effect a few years ago, the theft of an unencrypted laptop computer can become a major problem for any organisation that stores sensitive data.
"It is a very bad information-handling practice to keep sensitive information about individuals including their Social Security numbers on an unencrypted laptop or any other device that is removable," said Paul Stephens director of policy and advocacy with Privacy Rights Clearinghouse, a privacy advocacy group that has tracked the exposure of 217 million records in the US over the past three years.
Laptop thefts have been the source of privacy breaches at AT&T, The Gap, and the Chicago Public School system recently.
The Metropolitan Government of Nashville and Davidson County's IT services department is now working with the Commission to make changes to protect residents from this type of incident and has already come up with 19 recommendations, said Janel Lacy, a spokeswoman for Nashville Mayor Karl Dean.