Archive for the ‘I.D. Theft’ Category

Paper Shredding Failure Results in Breach Notification

Wednesday, December 15th, 2010

It’s more important than ever to make sure your business, especially if it relates to the medical industry, properly shreds all documents prior to disposal.

On October 4, 2010 the University of Tennessee Medical Center became aware of a “daily administrative report” that was disposed of through the hospital’s regular trash as opposed to proper shredding.

Contained within the report was “certain patient-related information, including the patient’s name and social security number.”

As a result, 8,000 patients had to be notified of the potential privacy breach as required with the HIPAA/HITECH health data breach notification provision.

Early next year (February 18th to be exact), this same breach in patient information could lead to fine’s reaching a potential maximum of $1.5 million. This new HITECH mandatory fine structure kicks into effect if it is determined that the information breach is a result of “willful neglect.”

The UT Medical Center’s West Knoxville billing office also reported a computer stolen in August 2005. The hard drive on stolen computer contained “patient names, Social Security numbers, and birth dates.” Letters from the hospital were sent to the people who’s information was believed to be on the hard drive.

In either event, with the new HITECH laws and fines coming on-line in the coming year, it’s extremely important for health organization to have proper document/information handling and destruction policies in place.

Step 1: Make sure you have a written document destruction policy in place.

Step 2: Make sure all employees are properly trained on your companies policies.

Step 3: Make sure someone at your organization is responsible for implementing and auditing your companies policy and training.

If you ever have any questions with regard to setting up a proper document destruction policy and training program, please feel free to contact us and I’d be glad to help.

Until next time…

Keep Totally Secure,

Mike
Head Shredding Guy

Free Hard Drive Destruction: Part 1

Tuesday, November 2nd, 2010

Hard Drive Destruction

Making sure hard drives are properly disposed of and the information they contain rendered useless has become an issue of prime importance.

Recently, the Connecticut Attorney General Richard Blumenthal announced a settlement with Health Net, an insurance firm, over the hard drive that was lost last year.

This one lost hard drive has resulted in Health Net having to pay $250,000 to the State of Connecticut along with implementing new privacy-protection measures.

Included in the terms of the deal is two years of credit monitoring for affected parties, $1 million in ID Theft insurance and reimbursement of any security freeze costs. Health Net is also possible on the hook for $500,000 payable to the state should there be any resulting ID Fraud.

With the stakes so high, I’ve spent countless moments scouring the internet finding videos demonstrating FREE and EFFECTIVE methods for destroying hard drives…

In this video, you will see a few construction workers using a “Core Drill” to bore out the center of a hard drive.

I’m not sure how much a core drill or replacement blades cost but it can’t be too much if someone is willing to goof around and destroy a hard drive with one.

The end result seems to be perfectly adequate destruction of a hard drive…

It would also seem that this method works well if you wanted to violently remove a portion of your foot and that of a co-workers.

For the record, although the hard drive and information on the hard drive seems no longer viable, I do not recommend performing this technique on your own.

The safest method to prevent serious injury to yourself or other humans and to prevent serious damage to public or private property, would be to seek out a professional Hard Drive Destruction Company to destroy your no longer needed hard drives.

Until next time…

Keep Totally Secure,

Mike

P.S. Please don’t try what you see on this video. These guys, although a bit irresponsible, do seem to know how to use this equipment.

We Recycle!

Friday, October 15th, 2010

Hey Folks,

I’ve been sitting around for the last week wondering what the next blog should be about.

After looking around on the website to see what I’ve all covered, it dawned on me that I’ve never talked about recycling.

And the funny thing is that just about every person that comes down to our facility for paper shredding asks us, “So what do you do with all the shredded paper?”

The simple answer is that all the shredded paper gets bailed and recycled.

It’s a pretty cool situation since not only are you making sure that you are protecting your identity by getting everything shredded, you’re at the same time making sure none of these documents are taking up valuable space in the landfill.

Second, the recycling results in the final and complete destruction of your shredded documents as they are turned into new paper fiber products.

It’s one of those “Win-Win” situations!

However, this does present one problem…

I do keep a close eye on what is allowed to get mixed in with the paper.

One of the biggest sticking points we run into is x-rays that are contained within paper patient files.

It doesn’t take very many x-rays within a full load of paper to significantly diminish the recyclability of the entire load.

Consequently, there’s been more than one customer I’ve lost (or refused to take on) because they had x-rays mixed in with their paper.

It’s not practical to try to shred everything on-site while at the same time trying to separate out the x-rays for separate destruction.

I typically recommend that we provide off-site shredding services in these instances so that we can take the documents back to our facility, remove the x-rays, shred the paper documents, and then destroy the x-rays separately.

Of course, that means a lot of extra work… Which means extra cost… Which means we charge double to perform this service!

It’s kind of a bummer when the customer is faced with removing the x-rays themselves, the additional cost we charge is often a lot less then doing it yourself.

And, since I’m on the topic of what should and should not be included with your paper documents when it comes to shredding, here’s a list I’ve put together over the years:

What can be Shredded:

  • White Ledger Paper
  • Computer Paper
  • Colored Ledger Paper
  • Envelopes
  • Staples
  • Paper Clips
  • Manila Folders
  • Hanging Files
  • Two Prong Fasteners
  • Small Binder Clips

What can’t be Shredded:

  • 3 Ring Binders
  • Plastic Binders
  • Plastics
  • Large Metal Objects
  • Plastic Bags
  • Magazines
  • Food or Drink Containers
  • Cardboard
  • Brown Bags
  • Hazardous Materials
  • Newspapers

I hope this helps…

So remember, not only are you getting your documents shredded, your also helping to contribute to a more renewable environment.

Until next time.

Keep Totally Secure,

Mike

Girl Scout Shred Day Fundraiser

Friday, October 1st, 2010

We are teaming up with Girl Scout Troop 6180 to combat Identity Theft.

Only $5.00 per box and we’ll be shredding everything in the big mobile shredding truck while you wait.

100% of the donations will be going to Girl Scout Troop 6180 to raise funds to attend a Girl Scout Bridging Ceremony in San Francisco and also to donate funds for other community service projects

Tomorrow, Saturday, October 2, 2010
9:00am – 12:00pm

Navajo Shopping Center
8650 Lake Murray Blvd
San Diego, CA  92119

(by Albertsons grocery store)

Click Here for Map

Feel free to give me a call if you have any questions (619) 295-5474

Hope to see you there,

Mike

Secure Drop-Off Shredding – Is it Really Secure?

Wednesday, September 29th, 2010

It seems the latest and greatest fad in “Secure” Paper Shredding is to drop your documents off at postal packaging place.

I see this all over the web where Shredding Companies are advertising hundreds of drop-off shredding locations all over the city where you can leave your sensitive documents for shredding.

At one time I thought that this might be a good idea…

… Until I started to call around.

A few years ago I thought it would be a great idea to have a drop-off location in East San Diego County.

My goal was to find a small locally own postal packaging store or a small stationary store.

After a few minutes of searching on the Internet I found what I thought was the perfect candidate.

I called and upon speaking to a very nice lady I explained that I was a San Diego Shredding company looking to partner up with a local East County store, such as theirs, where customers could come and drop off documents to be shredded at a later time by one of our secure shredding trucks.

I went on to say that their postal store would merely act as temporary custodian of the documents, charge the customers a set price, and then we would come by and shred the document for a certain price – of course, for less than what the customer was charged.

She seemed to think that this could be a good idea and I thought, “Wonderful, this might actually be a great idea to better service customers and make some extra sales!”

I then asked this question, “Do you have a secure location in your facility to store these documents in-between our shredding service visits?”

She responded very matter-of-fact, “I guess we could keep them out back next to the dumpster.”

“Humm” I said, “Let me think about that and I’ll get back to you.”

I quickly said “Thank you” and hung up the phone.

This was a very quick and easy test that most folks don’t really get the security aspects of sensitive document disposal.

It’s not that they’re bad people or people out to commit fraud.

Not at all…

They just haven’t put any time and effort into thinking about these sorts of things.

And that is really the heart of the matter.

Does the place you’re taking your documents to really understand and appreciate the sensitivity of your documents?

I don’t want to imply that all these postal places are not taking care of your sensitive documents.

But I can pretty much guarantee they are not putting all the necessary precautions in place to prevent a security breach of your documents.

How do I know?

Well, Total Secure Shredding has customers who own these postal places and we show up on occasion to service the containers they have.

I myself have actually performed the service on occasion.

The only thing I can confirm about security is that once we take control, my policies and procedures kick into effect and things are secure once we take custody of the documents.

But before that point, I think there’s much left to be desired.

With regard to the National Association for Information Destruction (NAID), it’s not really a big issue since there’s no claim that these postal stores are NAID Certified.

If you look closely, no one is claiming that these are secure facilities. You’re basically on your own in determining if you are leaving your documents at a trustworthy enough location.

I for one, refuse to list any of these locations (some who are in fact my customers) on my website.

Because, no matter what fine print I put on the website as a disclaimer, I’m implicitly endorsing and vouching for the security of your documents at that facility.

And quite frankly, there’s no way in hell I can do that unless they meet the strict guidelines I’ve but in place at my own facility – No matter what increase in revenue I could potentially see.

The liability to the Total Secure Shredding brand is just too great.

One “small” data breach could bring untold damages – Either in terms of real dollars or bad P.R.

So, all in all, please be careful where you drop-off your sensitive documents.

In the name of convenience, you may be sacrificing a lot in terms of security.

Until next time…

Keep Totally Secure,

Mike