ISA-2004-4100

Auditors were able to read information on 62 of 96 computers they picked from discarded machine shipments. Of those that could be read, auditors found 'sensitive' information on 35 machines. For the purposes of the audit, sensitive data was defined as information not normally released to the pubic by state agencies. The sensitive information included Social Security numbers, applications for loans, paperwork to garnish wages, lists of National Guard members with their Social Security numbers and timesheets. Agency password lists also could be accessed. On several machines, pornographic material also was found. That information has been turned over to our Investigative Division. Most of the information related to the employee who had formerly used the computer, but some pertained to agency clients and members of the public.