Illinois Department of Financial and Professional Regulation (IDFPR) Data Breach Exposes the Social Security Numbers and Personal Information of 300,000 Realtors, Mortgate Brokers, and Loan Originators Licensed in Illinois

The Illinois Department of Financial and Professional Regulation (IDFPR) has acknowledged (http://www.idfpr.com/breachinformation.asp)  a data security breach that occurred in January 2007 and which was confirmed on May 3, 2007, at which time the IDFPR referred the incident to State and Federal law enforcement agencies.

This data breach incident is troubling because it has exposed the personal information including Social Security numbers for over 300,000 realtors, mortgage brokers, and loan originators licensed to operate in the State of Illinois.  The IDFPR delayed notifying the public at the request of the law enforcement agencies working on the case.  Although, as a consumer I don't agree 100%, as a security professional, I'll extend the benefit of the doubt to the law enforcement community because they may have good reasons to delay public disclosure in an attempt to bring those responsible for this crime to justice.   

Regardless of the outcome of criminal investigation of this incident, there should be more accountability, resources, and technology within state and local governments to better protect the information of all citizens.  If state and local governments fail to protect our personal information from being placed at risk for fraud and abuse, we will not as a nation or as local communities be able to meet the challenges of homeland security effectively.