Drapetomaniacs

I originally talked about the BBB data breach here

The Better Business Bureau has announced it is restructuring it's business.

With in those announcements comes the statement:
"The BBB on Oct. 1 launched a new logo and national database consolidating its 130 regional databases at www.bbb.org."

I hoped they would attempt to move to a new system, but after beginning the complaint process, it was apparent the same system is in use.

The Better Business Bureau has repeatedly praised the flexibility of their system and efficiency in posting data online:
"The one part of eBINDr and the Hurdman system that I appreciate the most , is when another Bureau requests a change or a report you get that information too. "

It is often said that security interferes with usability and you have to measure the trade-offs to determine the balance. It doesn't appear as if anyone thought that the ease of posting data online meant it was easily and quickly exposed. Two two linked comments above span two years, so I have to wonder how many years of data are online and by how many branches.

Another Alert

The Better Business Bureau has issues its second phishing alert since being notified they are leaking customer data online.

The information is scarce and it's generic information about trusting e-mails. They do not warn people not to post more personal information than already required by the system and they haven't changed their privacy statement to mention information is publicly available.

They do offer good information for others to follow on id theft and privacy though.

Still no response to my complaints from August or September...