<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:thr="http://purl.org/syndication/thread/1.0">
    <title>Bank Lawyer&#39;s Blog</title>
    <link rel="self" type="application/atom+xml" href="http://www.banklawyersblog.com/3_bank_lawyers/atom.xml" />
    <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/" />
    <id>tag:typepad.com,2003:weblog-29532</id>
    <updated>2009-02-11T21:16:00-06:00</updated>
    <subtitle>Commentary on Banking Law</subtitle>
    <generator uri="http://www.typepad.com/">TypePad</generator>
    <entry>
        <title>What&#39;s Good For The Sharks Is Good For America </title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2009/02/whats-good-for-the-sharks-is-good-for-america-.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2009/02/whats-good-for-the-sharks-is-good-for-america-.html" />
        <id>tag:typepad.com,2003:post-62716725</id>
        <published>2009-02-11T21:16:00-06:00</published>
        <updated>2009-02-11T22:57:23-06:00</updated>
        <summary>A couple of weeks ago, I said that I thought the plaintiffs&#39; attorneys in the recently settled class action litigation against the Veterans Administration over the theft of a lap top computer would &quot;make millions.&quot; Yesterday, The Washington Post reported...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Life (In General)" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Litigation" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Marketing" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Music" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Practice of Law" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Privacy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="The Economy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        
        
<content type="xhtml" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
<div xmlns="http://www.w3.org/1999/xhtml"><p><a href="http://www.banklawyersblog.com/3_bank_lawyers/2009/01/ptsd-damages-for-a-nonevent.html"></a><a href="http://www.banklawyersblog.com/.a/6a00d8341c652b53ef0111685be24d970c-popup" onclick="window.open( this.href, &#39;_blank&#39;, &#39;width=640,height=480,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0&#39; ); return false" style="float: left;"><img alt="Shark" class="at-xid-6a00d8341c652b53ef0111685be24d970c " src="http://www.banklawyersblog.com/.a/6a00d8341c652b53ef0111685be24d970c-120wi" style="margin: 0px 5px 5px 0px;" /></a>
 A couple of weeks ago, I said that I thought the plaintiffs&#39; attorneys in the recently settled class action litigation against the Veterans Administration over the theft of a lap top computer would &quot;make millions.&quot; Yesterday, <a href="http://www.washingtonpost.com/wp-dyn/content/article/2009/02/10/AR2009021002219.html">The Washington Post</a> reported that the &quot;millions&quot; assumption was indeed correct.</p><blockquote><p><em><strong>Under the $20 million deal, lawyers for the veterans will receive up to
$5.5 million for fees and costs, while roughly $1.4 million will be
spent to notify millions of veterans and provide information about the
settlement via advertisements in newspapers, magazines and a toll-free
hot line.
</strong></em></p></blockquote><p>As you&#39;ll recall, each veteran who can prove that he or she has &quot;incurred out of pocket expenses for credit monitoring or physical symptoms of emotional distress,&quot; will receive between $75 and $1500. I&#39;ve asked it before and I&#39;ll ask it again: Is this a great country, or what?</p><p>In yet one more sign that this nation of the lawyers, by the lawyers, and for the lawyers shall not perish from the earth (as long as one lawyer and one solvent defendant remain), <em>The Memphis Business Journal</em> recently <a href="http://memphis.bizjournals.com/memphis/stories/2009/02/02/focus1.html?b=1233550800%5E1768894&amp;page=2">ran a piece</a> detailing that though the TARP program may be a bust in terms of goosing the economy, it&#39;s been a godsend for the formation of &quot;special practice groups&quot; by law firms. </p><blockquote><p><em><strong>Securities Docket, an online trade journal for the securities industry,
has tracked the proliferation of financial crisis practice groups and
task forces since the fall. To date, the self-regulated list has grown
to 32 national law firms. No Memphis law firms are represented.</strong></em></p></blockquote><p>Dude! If you&#39;re <a href="http://www.lyrics007.com/Marc%20Cohn%20Lyrics/Walking%20In%20Memphis%20Lyrics.html">walkin&#39; in Memphis</a>, walkin&#39; with your feet ten feet off of Beale, if you&#39;re walkin&#39; in Memphis, and you don&#39;t know if you really feel the way you feel, then it&#39;s probably because you haven&#39;t created a financial crisis practice group. Get you one of those bad boys and you&#39;ll know how you really feel. You&#39;ll be feelin&#39; like singing Hallelujah!</p><p>We&#39;ve been a big fan of special practice groups, linked first to subprime and now to the bailout, <a href="http://www.banklawyersblog.com/3_bank_lawyers/2008/10/look-at-me-ma-i-gotta-brand-new-practice-group.html">for some time now</a>. Every law firm should have one. In fact, when private capital finally heeds Treasury&#39;s siren call and comes pouring in to buy up &quot;distressed assets,&quot; we look forward to the first &quot;Bottom Feeders Feeding Frenzy Practice Group&quot; bursting forth from a giant law firm like Athena from the head of Zeus.</p></div>
</content>


    </entry>
    <entry>
        <title>PTSD Damages For A Non-Event</title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2009/01/ptsd-damages-for-a-nonevent.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2009/01/ptsd-damages-for-a-nonevent.html" />
        <id>tag:typepad.com,2003:post-62062826</id>
        <published>2009-01-28T21:24:00-06:00</published>
        <updated>2009-01-28T21:24:00-06:00</updated>
        <summary>Two and one-half years ago, then-VA Administrator Jim Nicholson asked Congress for emergency funding of not less $160.5 million &quot;for credit counseling and other measures to protect veterans and military troops whose sensitive personal information was stolen.&quot; Yesterday, the VA...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Crime" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Litigation" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Privacy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Web/Tech" />
        
        
<content type="xhtml" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
<div xmlns="http://www.w3.org/1999/xhtml"><p><a href="http://www.banklawyersblog.com/3_bank_lawyers/2006/06/overkill_at_the.html"></a><a href="http://www.banklawyersblog.com/.a/6a00d8341c652b53ef010536ff2642970c-popup" onclick="window.open( this.href, &#39;_blank&#39;, &#39;width=640,height=480,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0&#39; ); return false" style="float: left;"><img alt="Ambulancechasers" class="at-xid-6a00d8341c652b53ef010536ff2642970c " src="http://www.banklawyersblog.com/.a/6a00d8341c652b53ef010536ff2642970c-120wi" style="margin: 0px 5px 5px 0px;" /></a>
 Two and one-half years ago, then-VA Administrator Jim Nicholson asked Congress for emergency funding of not less $160.5 million &quot;for credit counseling 
and other measures to protect veterans and military troops whose sensitive 
personal information was stolen.&quot; Yesterday, <a href="http://www.washingtonpost.com/wp-dyn/content/article/2009/01/27/AR2009012702476.html">the VA announced</a> that it had agreed to pay $20 million to settle class-action litigation filed by five veterans groups as a result of that data theft. </p><p>Unfortunately for the taxpayers, there&#39;s a rub. As VA spokesman Phil Buhdan stated yesterday: &quot;We want to assure veterans there is no evidence that the information
involved in this incident was used to harm a single veteran.&quot;</p><p>It&#39;s even better than that. A lap top and external hard drive containing the data were stolen, and later recovered. According to FBI experts at the that time, the data had not been <em>accessed</em> by the thieves, much less used. In the intervening 30 months, not a single incident of identity theft or other unlawful use of the personal information was reported. So why pay $20 million?</p><blockquote><p><em><strong>The money, which will come from the U.S. Treasury, will be used to pay
veterans who can show they suffered actual harm, such as physical
symptoms of emotional distress or expenses incurred for credit
monitoring.
</strong></em></p><p><em><strong>[...]<br /><br />According to the proposed settlement, veterans who show harm from the
data theft will be able to receive payments ranging from $75 to $1,500.
If any of the $20 million is left over after making payments, the
remainder would be donated to veterans&#39; charities agreed to by the
parties, such as the Fisher House Foundation Inc. and The Intrepid
Fallen Heroes Fund.
<br /><br />[...]<br /><br />&quot;This is a very positive result,&quot; said Douglas J. Rosinski, an attorney
representing the veterans groups. &quot;A lot of hard work went into finding
a resolution that all the parties could be proud to say they were a
part of bringing about.&quot;
</strong></em></p></blockquote><p>$75 to $1500 a pop for &quot;emotional distress.&quot; How many warriors will step forward and claim that prize? Not many, I bet.&#0160; As for credit monitoring, the VA offered to provide <span style="text-decoration: underline;">free</span> credit monitoring for any veteran who asked for it, but it wasn&#39;t necessary, was it? We knew it was a waste of money in the summer of 2006, and the absence of any misuse of personal information in the intervening months has only supported that view. The VA fired the parties responsible for the lapse of security, and the OMB changed its rules to require encryption of laptop hard drives, and all that was done without prompting by a class action lawsuit. Therefore, no actual harm exists to be compensated, and no dysfunctional behavior was corrected by the litigation.</p><p>The folks that this class-action litigation serves are the plaintiffs&#39; lawyers. They&#39;ll make a lot more per-person than $75 to $1500. They&#39;ll make millions. For that small cadre, this outcome is, indeed, &quot;a very positive result.&quot;</p></div>
</content>


    </entry>
    <entry>
        <title>You Can&#39;t Get There From Here</title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2007/10/you-cant-get-th.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2007/10/you-cant-get-th.html" thr:count="2" thr:updated="2007-10-30T12:35:05-05:00" />
        <id>tag:typepad.com,2003:post-40839418</id>
        <published>2007-10-29T22:29:00-05:00</published>
        <updated>2007-10-29T22:29:00-05:00</updated>
        <summary>Saturday&#39;s Houston Chronicle had an amusing (to perverse readers like your truly, at least) article on the current housing finance crisis, the dirty word &quot;bailout,&quot; and how many of the proposals that have been made to &quot;fix&quot; the crisis have...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Bankruptcy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Fannie Mae" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="FDIC" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Federal Legislation" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="FHA" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Freddie Mac" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Lending" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Life (In General)" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Mortgage Banking" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Politics" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Real Estate" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="The Economy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        
        
<content type="html" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
&lt;div xmlns=&quot;http://www.w3.org/1999/xhtml&quot;&gt;&lt;p&gt;&lt;a onclick=&quot;window.open(this.href, &#39;_blank&#39;, &#39;width=228,height=254,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0&#39;); return false&quot; href=&quot;http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/2007/10/29/mortgages_for_dummiies.jpg&quot;&gt;&lt;img width=&quot;100&quot; height=&quot;111&quot; border=&quot;0&quot; src=&quot;http://www.banklawyersblog.com/3_bank_lawyers/images/2007/10/29/mortgages_for_dummiies.jpg&quot; title=&quot;Mortgages_for_dummiies&quot; alt=&quot;Mortgages_for_dummiies&quot; style=&quot;margin: 0px 5px 5px 0px; float: left;&quot; /&gt;&lt;/a&gt;
&lt;a href=&quot;http://www.chron.com/disp/story.mpl/business/5249779.html&quot;&gt;Saturday&#39;s &lt;em&gt;Houston Chronicle&lt;/em&gt;&lt;/a&gt; had an amusing (to perverse readers like your truly, at least) article on the current housing finance crisis, the dirty word &amp;quot;bailout,&amp;quot; and how many of the proposals that have been made to &amp;quot;fix&amp;quot; the crisis have a snowball&#39;s chance in Hades of either (a) being adopted or, if adopted, (b) actually resolving the crisis. According to the &lt;em&gt;Chronicle&lt;/em&gt; the stumbling block to any bailout is simple: &amp;quot;Most risky home loans made near the end of the housing boom can&#39;t be salvaged.&amp;quot;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;Some people are just in houses that are just way out of reach for
them,&amp;quot; said Douglas Elmendorf, a senior economics fellow at the
Brookings Institution, noting that politicians do not like &amp;quot;explicitly
appropriating funds for this.&amp;quot;&lt;br /&gt;&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;[...]&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;Washington&#39;s desire to help is undercut by the reality that it&#39;s not
viable to rescue homeowners or banks that made loans or investors that
bought securities backed by mortgages.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;I have sympathy with a lot of the borrowers, but I don&#39;t see how
you would decide which ones were worthy and which ones weren&#39;t,&amp;quot; Rep.
Barney Frank, D-Mass., chairman of the House Financial Services
Committee, said last week, while announcing legislation to crack down
on mortgage lending abuses.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;When a soft touch like Barney shakes his head at a bailout, you know that it&#39;s got to be DOA. On the other hand, Frank&#39;s all for closing the barn door after the horses. There&#39;s no question that no one (other than the incurably wicked or deranged) wants to see a repeat performance of the unbridled shenanigans that occurred over the last several years in the subprime mortgage market. In that regard, it&#39;s likely that some bad legislation will be enacted that will over-correct prior (and no longer persistent) market practices and exacerbate the current credit squeeze by making housing credit tougher to obtain and more expensive for prime, as well as &amp;quot;less than Grade A,&amp;quot; borrowers. Trying to fine tune business practices is like trying to fine tune the hot and cold water in your shower. First it&#39;s too hot, then too cold, then too hot, then too cold, and on and on until you get it just right. That kind of tinkering is generally best achieved by market participants who&#39;ve been scalded and/or frozen and are sensitive to all the &amp;quot;nuances.&amp;quot; When Congress tries to do it in its usual ham-fisted manner, it generally slams the tap either all the way to &amp;quot;surface of the sun&amp;quot; or to &amp;quot;absolute zero.&amp;quot; &lt;/p&gt;

&lt;p&gt;Not that such a risk will stop Congress. The taxpayers pay Congressmen and Senators to &amp;quot;do something&amp;quot; and we can&#39;t expect them to simply sit on their hands, can we? Especially a well known &amp;quot;hands on&amp;quot; kind of guy like Rep. Frank.&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;Frank and several consumer groups say lending law reform is needed
to prevent mortgage abuses in the future, while Republicans say doing
it now makes it harder for the housing market to recover.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;Rep. Patrick McHenry, R-N.C., warned at a House hearing Wednesday
that Frank&#39;s proposed bill would &amp;quot;push us into a housing recession&amp;quot;
because lenders would face new restrictions on their ability to help
borrowers refinance.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;Political pragmatists say there are so many complicated issues at
hand and so many interest groups involved that only narrow proposals
can muster support.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&amp;quot;Damn the complicated issues! Full speed ahead!&amp;quot;&lt;/p&gt;

&lt;p&gt;The final legislation may be more narrow than Frank&#39;s &amp;quot;&lt;a href=&quot;http://www.house.gov/apps/list/press/financialsvcs_dem/press102207.shtml&quot;&gt;Mortgage Reform and Anti-Predatory Lending Act of 2007&lt;/a&gt;&amp;quot; that was submitted last week, but it&#39;s likely that we&#39;ll get some type of legislation enacted by Congress this year. Whether it will have a negative impact on credit&amp;nbsp; depends on how broad it might be. If it contains a suitability standard (like the &amp;quot;net tangible benefit&amp;quot; in Section 202 of the proposed bill) or the &amp;quot;securitizer liability&amp;quot; in Section 204, I expect that it will negatively impact the availability and cost of credit.&lt;/p&gt;

&lt;p&gt;Sheila Bair&#39;s proposal of &amp;quot;a chicken in every subprime borrower&#39;s pot&amp;quot; comes in for some abbreviated &lt;a href=&quot;http://en.wikipedia.org/wiki/Fisking&quot;&gt;fisking&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;Sheila Bair, chair of the Federal Deposit Insurance Corp., argues
that mortgage servicing companies should agree to widespread
conversions of adjustable-rate loans to fixed-rate loans for borrowers
who are current on payments but confront rate resets.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;Experts in the $6 trillion market for mortgage-backed securities say
Bair&#39;s idea won&#39;t work because mortgage servicing companies, which
collect and distribute loan payments to lenders, have a legal
responsibility to modify loans only if they&#39;re confident the changes
would be successful, says Mark Adelson, a mortgage securitization
consultant.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;Mr. Adelson must have confused Ms. Bair with someone concerned with the financial well-being of the lenders and servicers that her agency regulates (and insures). &lt;a href=&quot;http://www.banklawyersblog.com/3_bank_lawyers/2007/10/bair-barks-at-s.html&quot;&gt;As we&#39;ve previously observed&lt;/a&gt;, her primary concern is with a quick fix that &lt;em&gt;appears&lt;/em&gt; to help borrowers and the politicians who cater to the downtrodden. The FDIC&#39;s new motto: &amp;quot;Legal responsibility? We got your legal responsibility; RIGHT HERE!&amp;quot; &lt;/p&gt;

&lt;p&gt;Dick Durbin&#39;s Chapter 13 modification and cramdown proposal also gets a cold shoulder. &lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;Some Democrats and consumer advocates want bankruptcy judges to be able to modify loans to keep struggling borrowers from losing their homes. Critics say the idea would keep lenders out of the mortgage market and result in more bankruptcies.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;Finally, the always-ready-with-a-quote Bert Ely blows up the idea that Fannie or Freddie can play a part in any &amp;quot;rescue effort.&amp;quot;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;Finally, some Democrats want Fannie Mae and Freddie Mac to be
allowed to expand their mortgage portfolios, creating financial
flexibility for investors and lenders to help borrowers refinance.
Republicans, however, don&#39;t want to do that until the
government-sponsored mortgage giants get more oversight in the wake of
multibillion-dollar accounting irregularities discovered in recent
years.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;The federal regulator of Fannie and Freddie agreed to a smaller
portfolio cap increase than what Democrats want, arguing that the
companies have enough capacity to help the battered mortgage market.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;Fannie and Freddie aren&#39;t doing anybody any favors,&amp;quot; said Bert Ely,
an Alexandria, Va. banking consultant. &amp;quot;They&#39;re refinancing people that
would be good candidates&amp;quot; for new loans, &amp;quot;no matter what.&amp;quot;&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;That&#39;s right, Bert. Neither Fannie nor Freddie is going to make subprime loans, so how, exactly, either is going to affect the subprime credit crisis is a mystery to us all. But it sure sounds like &amp;quot;a plan&amp;quot; when some politician calls for expanded capacity for Freddie and Fannie, doesn&#39;t it? &lt;/p&gt;

&lt;p&gt;In a world where appearance trumps substance, the &amp;quot;spin&amp;quot; is all that matters.&lt;/p&gt;&lt;/div&gt;
</content>


    </entry>
    <entry>
        <title>More Free Credit Monitoring </title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/08/more_free_credi.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/08/more_free_credi.html" thr:count="0" />
        <id>tag:typepad.com,2003:post-12169953</id>
        <published>2006-08-14T04:24:00-05:00</published>
        <updated>2006-08-14T04:24:00-05:00</updated>
        <summary>As promised by VA Secretary Jim Nicholson last month, the VA has retained ID Analytics of San Diego &quot;to detect potential patterns of credit misuse&quot; for veterans whose personal data was contained on a hard drive of a laptop stolen...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Outsourcing" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Privacy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Web/Tech" />
        
        
<content type="html" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
&lt;div xmlns=&quot;http://www.w3.org/1999/xhtml&quot;&gt;&lt;p&gt;&lt;a onclick=&quot;window.open(this.href, &#39;_blank&#39;, &#39;width=170,height=76,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0&#39;); return false&quot; href=&quot;http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/unisys.jpg&quot;&gt;&lt;img width=&quot;100&quot; height=&quot;44&quot; border=&quot;0&quot; src=&quot;http://www.banklawyersblog.com/3_bank_lawyers/images/unisys.jpg&quot; title=&quot;Unisys&quot; alt=&quot;Unisys&quot; style=&quot;margin: 0px 5px 5px 0px; float: left;&quot; /&gt;&lt;/a&gt;
&lt;a href=&quot;http://www.banklawyersblog.com/3_bank_lawyers/2006/07/back_through_th.html&quot;&gt;As promised&lt;/a&gt; by VA Secretary Jim Nicholson last month, &lt;a href=&quot;http://www.siliconvalley.com/mld/siliconvalley/news/editorial/15235629.htm&quot;&gt;the VA has retained ID Analytics&lt;/a&gt; of San Diego &amp;quot;to detect potential patterns of credit misuse&amp;quot; for veterans whose personal data was contained on a hard drive of a laptop stolen from the home of a VA employee in May. The VA provoked a firestorm of methane gas emissions from politicians and lobbyists for veterans when it rescinded its decision to provide free credit monitoring for veterans whose data was contained on that hard drive. As I&#39;ve previously opined, the credit monitoring was unnecessary, and the VA did the right thing by refusing to provide it.&lt;/p&gt;

&lt;p&gt;Unisys isn&#39;t so lucky. &lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;VA subcontractor Unisys Corp. also agreed to provide one year of free credit 
monitoring for as many as 38,000 veterans after the company last week lost a 
desktop computer containing their data at its offices in Reston, Va.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;Letters will be sent in coming days to veterans affected in the Unisys case 
describing how to sign up for the free credit monitoring.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;The fact that the data stored on the hard drive of the Unisys computer is password protected (as was the data on the stolen VA laptop), and that there is no evidence that the data has been accessed (as was the case with the VA laptop), does not spare Unisys, as it does the VA, from the expense of a year&#39;s worth of free credit monitoring for all veterans whose data &lt;em&gt;might possibly be&lt;/em&gt; compromised. Apparently, a government contractor is more susceptible to &amp;quot;strong arming&amp;quot; than is a government agency. Perhaps Unisys is taking the public relations bull by the horns and &amp;quot;doing the right thing&amp;quot; if, by &amp;quot;the right thing,&amp;quot; we mean what&#39;s the best thing from a PR standpoint for the VA. The VA can say &amp;quot;see, we&#39;re on top of this thing.&amp;quot; Moreover, credit monitoring for 38,000 veterans (the number on the Unisys desktop&#39;s hard drive) is a lot less expensive (although not cheap) than it is for 26.5 million veterans (the number on the VA&#39;s stolen laptop).&lt;/p&gt;

&lt;p&gt;Personally, I think that Unisys is jumping the gun, but it&#39;s a valid business decision to make. At least it&#39;s not tax dollars being wasted on useless credit monitoring services. Not until they build recouping the cost into their next bid on a government contract, that is.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;http://www.banklawyersblog.com/3_bank_lawyers/2005/12/merry_christmas.html&quot;&gt;I&#39;ve previously bloviated&lt;/a&gt; that the regulatory remedy of choice for data security breaches will be free credit monitoring. This is one more reason for each bank to seriously consider encrypting personal information during the &lt;em&gt;entire&lt;/em&gt; &amp;quot;life cycle&amp;quot; of the data on a bank&#39;s system. Yes, such encryption can be cumbersome and expensive, but I can not say this too frequently: reason does not rule this area. Emotion, ignorance and fear do, as well as cynical political opportunism (wherever it can be applied).&lt;/p&gt;

&lt;p&gt;That&#39;s life today in the USA. You need to face the facts when you&#39;re considering proper risk mitigation procedures.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;update 8/15/06:&lt;/strong&gt; The VA opts for encryption. As reported last night by &lt;a href=&quot;http://www.washingtonpost.com/wp-dyn/content/article/2006/08/14/AR2006081400611.html&quot;&gt;&lt;em&gt;The Washington Post&lt;/em&gt;&lt;/a&gt;:&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;Following a series of embarrassing data security breaches, the
Department of Veterans Affairs on Monday announced it would upgrade all
the agency&#39;s computers with a new encryption technology to be first
installed on the agency&#39;s laptops within a month.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;A system-wide
encryption program will be a tremendous step forward in improving the
safety and security of sensitive veteran information,&amp;quot; said VA
Secretary Jim Nicholson.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;[...]&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;The agency said it expects to have all of its laptop computers fully
encrypted within four weeks, followed by encryption of desktop
computers.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;/div&gt;
</content>


    </entry>
    <entry>
        <title>More Partisan Nonsense Re: VA</title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/08/more_partisan_n.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/08/more_partisan_n.html" thr:count="1" thr:updated="2006-08-10T09:17:14-05:00" />
        <id>tag:typepad.com,2003:post-12107874</id>
        <published>2006-08-10T03:18:00-05:00</published>
        <updated>2006-08-10T03:18:00-05:00</updated>
        <summary>The Senate&#39;s &quot;top Democrat&quot; (is that akin to Jamaica&#39;s &quot;top downhill skier&quot;?) called for the ouster of VA Secretary Jim Nicholson because a vendor (Unisys) &quot;lost&quot; a desktop computer that contained personal information on at least 38,000 veterans. Not that...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Outsourcing" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Privacy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Web/Tech" />
        
        
<content type="html" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
&lt;div xmlns=&quot;http://www.w3.org/1999/xhtml&quot;&gt;&lt;p&gt;&lt;em&gt;&lt;strong&gt;&lt;a href=&quot;http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/foghorns.jpg&quot; onclick=&quot;window.open(this.href, &#39;_blank&#39;, &#39;width=365,height=333,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0&#39;); return false&quot;&gt;&lt;img width=&quot;100&quot; height=&quot;91&quot; border=&quot;0&quot; alt=&quot;Foghorns&quot; title=&quot;Foghorns&quot; src=&quot;http://www.banklawyersblog.com/3_bank_lawyers/images/foghorns.jpg&quot; style=&quot;margin: 0px 5px 5px 0px; float: left;&quot; /&gt;&lt;/a&gt;&lt;/strong&gt;&lt;/em&gt;&lt;a href=&quot;http://www.siliconvalley.com/mld/siliconvalley/news/editorial/15227134.htm&quot;&gt;The Senate&#39;s &amp;quot;top Democrat&amp;quot;&lt;/a&gt; (is that akin to Jamaica&#39;s &amp;quot;top downhill skier&amp;quot;?) called for the ouster of VA Secretary Jim Nicholson because a vendor (Unisys) &amp;quot;lost&amp;quot; a desktop computer that contained personal information on at least 38,000 veterans. Not that this being an election year has anything to do with the Democrats using this non-event to attempt to make political hay.&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;Enough is enough,&amp;quot; Senate Minority Leader Harry Reid, D-Nev., said 
Tuesday. &amp;quot;Less than a month after promising to make the VA the &#39;gold standard&#39; 
in data security, Secretary Nicholson has again presided over loss of the 
personal information of thousands more veterans.&amp;quot;
&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;Reid is the third Senate Democrat -- joining Sens. Patrick Leahy of Vermont 
and John Kerry of Massachusetts -- who has called for Nicholson&#39;s ouster 
following high-profile data thefts at the government&#39;s second largest 
agency.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;Unfortunately, this dangerous incompetence has become all too common in the 
Bush White House, and it has made America less safe,&amp;quot; Reid said.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;[...]&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;Each week seems to bring another alarming example of incompetence by the 
Bush administration to protect the personal information of Americans,&amp;quot; Leahy 
said. &amp;quot;Certainly, our nation&#39;s veterans -- who have been willing to make the 
ultimate sacrifice for their country -- deserve better.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;Kerry agreed. &amp;quot;Fire the incompetents,&amp;quot; he said. &amp;quot;Losing veterans&#39; most 
sensitive personal information must have consequences.&amp;quot;&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;Kerry, if we fired incompetents, where would that leave you? Living off of &amp;quot;Tereza&#39;s&amp;quot; gazillions? Heck, you couldn&#39;t even beat George W. Bush! How incompetent does that make you?&lt;/p&gt;

&lt;p&gt;In Nicholson&#39;s part of town, having Reid, Leahy and Kerry pile on you might be considered as having &amp;quot;won the trifecta&amp;quot; and be considered cause for high fives and a manly squawk of &amp;quot;awwwwwwrrrrriiiiiggggghhhhhhhtttttt!!!!&amp;quot; Nicholson&#39;s likely too dignified for that, though. &lt;/p&gt;

&lt;p&gt;On the other hand, he might want to punch out the &lt;a href=&quot;http://www.firstcoastnews.com/news/usworld/news-article.aspx?storyid=62690&quot;&gt;cyberidiots in his own party&lt;/a&gt;. &lt;/p&gt;

&lt;p&gt;&lt;em&gt;&lt;strong&gt;&amp;quot;I am absolutely appalled that another computer containing the personal
information of veterans has gone missing,&amp;quot; said Sen. Rick Santorum,
R-Pa. &amp;quot;Those responsible must be held accountable and the VA clearly
needs to do a better job of overseeing its contracting entities.&amp;quot;&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;I can&#39;t find a written record of this, but I&#39;m sure someone told me that Santorum also called the VA&#39;s security efforts &amp;quot;an abortion,&amp;quot; which is for Senator Santorum (who was also a member of the Senate when some of its members knifed Julius Caesar), &lt;a href=&quot;http://www.massscorecard.org/Social/Rick_Santorum_Abortion.htm&quot;&gt;the harshest of condemnations&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;For some reason, I doubt Nicholson, a former Army Ranger and decorated Vietnam Veteran, is quaking in his combat boots. No proof of that; just a hunch.&lt;/p&gt;

&lt;p&gt;Let me make clear that my disgust with The Three Stooges (and &amp;quot;&lt;a href=&quot;http://www.threestooges.com/bios/bios.asp?intStoogeID=4&quot;&gt;Shemp&lt;/a&gt;&amp;quot; Santorum) is not motivated by their political party affiliation, but by their attempt to unnecessarily stir up veterans again over an issue that may be a non-issue.&lt;/p&gt;

&lt;p&gt;Let&#39;s review:&lt;/p&gt;

&lt;ul&gt;&lt;li&gt;The VA did not &amp;quot;lose&amp;quot; the computer, one of its contractor&#39;s did.&lt;/li&gt;

&lt;li&gt;The contractor is Unisys, an organization that knows more about computer security than Harry Reid knows about special interest groups (ok, not quite as much, but then, when it comes to special interests, &lt;a href=&quot;http://www.vote-smart.org/issue_rating_category.php?can_id=S0561103&quot;&gt;Harry&#39;s &amp;quot;The Man&amp;quot;&lt;/a&gt;).&lt;/li&gt;

&lt;li&gt;The computer was located in a secure building, on a floor requiring security cards to gain access.&lt;/li&gt;

&lt;li&gt;The hard drive is password protected.&lt;/li&gt;

&lt;li&gt;No one knows if the computer was stolen and, if so, whether any access to the data is likely to occur (for example, what was the strength of the password?).&lt;/li&gt;

&lt;li&gt;See &lt;a href=&quot;http://www.banklawyersblog.com/3_bank_lawyers/2005/11/data_security_b.html&quot;&gt;previous posts&lt;/a&gt; on &lt;a href=&quot;http://www.banklawyersblog.com/3_bank_lawyers/2006/06/laptop_thefts_m.html&quot;&gt;this blog&lt;/a&gt; for statistics (oops, sorry Senators, didn&#39;t mean to introduce facts into the discussion) about how little computer thefts and actual computer security breaches (when they actually occur, which has not been proved in this case) result in identity theft.&lt;/li&gt;&lt;/ul&gt;

&lt;p&gt;All-in-all, much ado about (most likely) nothing. At least, nothing that can be demonstrated at this time. In fact, I&#39;d wager that Unisys was following industry standard security procedures, and that there was nothing more that the VA reasonably could do to secure that data. You could require every hard drive to be encrypted, but that&#39;s expensive. Who&#39;s going to pay for that? You guessed right! The taxpayers. &lt;/p&gt;

&lt;p&gt;Computer theft happens. Get used to it.&lt;/p&gt;

&lt;p&gt;No intelligent discussion of any issue is possible with cynical hacks like these. Headlines are all that matter.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;UPDATE: &lt;/strong&gt;A friend, business consultant &lt;a href=&quot;http://www.jmwalkerjr.com/&quot;&gt;John Walker&lt;/a&gt;, sent me this dead-on quotation: &amp;quot;Politics is the art of looking for trouble, 
finding it whether it exists or not, diagnosing it incorrectly, and applying the 
wrong remedy.&amp;quot; - &lt;em&gt;Ernest Benn&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;/div&gt;
</content>


    </entry>
    <entry>
        <title>Back Through The Looking Glass</title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/07/back_through_th.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/07/back_through_th.html" thr:count="0" />
        <id>tag:typepad.com,2003:post-11779808</id>
        <published>2006-07-21T04:42:00-05:00</published>
        <updated>2006-07-21T04:42:00-05:00</updated>
        <summary>Finally, sanity prevails inside the VA, and what ensues outside of it? More selfish whining and moaning by both the cynical and the ignorant. Veterans Affairs Secretary Jim Nicholson on Thursday defended the government&#39;s decision to withdraw free credit monitoring...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Crime" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Politics" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Privacy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Web/Tech" />
        
        
<content type="xhtml" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
<div xmlns="http://www.w3.org/1999/xhtml"><p><a onclick="window.open(this.href, '_blank', 'width=222,height=278,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false" href="http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/nicholson.jpg"><img width="100" height="125" border="0" src="http://www.banklawyersblog.com/3_bank_lawyers/images/nicholson.jpg" title="Nicholson" alt="Nicholson" style="margin: 0px 5px 5px 0px; float: left;" /></a>
Finally, sanity prevails inside the VA, and what ensues outside of it? More selfish whining and moaning by both the cynical and the ignorant.</p>

<p><em><strong><span class="mainarttxt">Veterans Affairs Secretary Jim Nicholson on
Thursday defended the government's decision to withdraw free credit
monitoring for millions of veterans, saying there was little risk their
sensitive data would be compromised.</span>
<br /><br /><span class="mainarttxt">Testifying to a Senate panel, Nicholson
acknowledged there were no 100 percent guarantees that names,
birthdates and Social Security numbers stored on a VA employee's stolen
laptop and external drive were not accessed or copied. But he said the
low risk did not justify a year of personalized monitoring at a
taxpayer cost of $160.5 million.</span>
<br /><br /><span class="mainarttxt">&quot;Facts have changed, the situation has
changed,&quot; Nicholson said, noting that the stolen equipment has been
recovered and that the FBI determined with a &quot;high degree of
confidence&quot; that the data was not compromised.</span>
</strong></em></p>

<p>This action is exactly what I called for <a href="http://www.banklawyersblog.com/3_bank_lawyers/2006/06/overkill_at_the.html">last month</a>. I guess that makes me a heartless SOB, just like Jimbo.</p>

<p><em><strong><span class="mainarttxt">Nicholson said the VA was in the process of
hiring a company to provide data breach analysis to detect potential
patterns of misuse of data. In addition, the department planned to send
letters to veterans informing them of free services already available
to all citizens, including free monitoring for 90 days and credit
reports three times a year.</span>
</strong></em></p>

<p>Well, that's just not good enough for some people. What kind of people, you ask? Guess.</p>

<p><em><strong><span class="mainarttxt">&quot;I know the FBI says it has a high level of
certainty that the data was not accessed, but frankly I wouldn't bet my
credit on it,&quot; said Sen. Patty Murray, D-Wash. &quot;And more importantly,
the VA still has an inadequate data security system. Until that's
fixed, I think the VA should keep its commitment.&quot;</span>
<br /><br /><span class="mainarttxt">Sen. Richard Burr, R-N.C., saying that many
veterans still don't feel reassured, added: &quot;As long as 100 percent are
comfortable, I'm comfortable. But unless we reach that consensus, we
still have some work to do.&quot;</span></strong>
</em></p>

<p>&quot;100%&quot;? Are you kidding me? You know there's one guy in every veterans gathering with the propeller <a onclick="window.open(this.href, '_blank', 'width=576,height=461,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false" href="http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/propeller.jpg"><img width="100" height="80" border="0" src="http://www.banklawyersblog.com/3_bank_lawyers/images/propeller.jpg" title="Propeller" alt="Propeller" style="margin: 0px 5px 5px 0px; float: left;" /></a>
cap on his head, wearing the green field jacket with the peace sign on the back and &quot;Mouse, M&quot; over the left breast pocket. The guy who screams &quot;INCOMING&quot; and hits the deck every time an <del>illegal alien</del> undocumented guest worker fires up a lawn mower. That guy's NEVER going to feel safe.</p>

<p>Besides, stirring the pot gives veterans support groups something to do, and this issue is too good to simply shut up about. </p>

<p><em><strong>&quot;To say the least, we're outraged that the administration would renege
on their offer,&quot; said Robert E. Wallace, executive director of the
Veterans of Foreign Wars. &quot;The letter from OMB says the FBI has a 'high
degree of confidence' -- that's not 100 percent. The government made a
mistake. The government owes it to veterans to make them whole.&quot;</strong></em></p>

<p>The trouble is, Bob, you can't make someone &quot;whole&quot; UNTIL THEY'VE SUFFERED A LOSS! There has been <strong>NO LOSS</strong> suffered by any veteran as a result of the theft of the laptop, and it is highly unlikely that any loss will be suffered. Jim Nicholson has already pointed out the FREE CREDIT MONITORING SERVICES ALREADY AVAILABLE TO VETERANS. Spending tens or millions of dollars of our tax dollars more on unnecessary credit monitoring services is not justified, period. </p>

<p>The government made the right call. Now, we'll see if they've got the wherewithal to stick by it.</p>

<p>As a guy who turned 18 in 1967, I'm struck by the number of men my age today who claim to have <a onclick="window.open(this.href, '_blank', 'width=288,height=404,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false" href="http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/upriver.jpg"><img width="100" height="140" border="0" src="http://www.banklawyersblog.com/3_bank_lawyers/images/upriver.jpg" title="Upriver" alt="Upriver" style="margin: 0px 5px 5px 0px; float: left;" /></a>
either served on a Swift Boat right behind John Kerry's when he did/did not &quot;off&quot; an armed/unarmed Vietnamese man running toward/away from him and/or when he did/did not visit Cambodia/Laos/Las Vegas one Christmas night in 1967/1968/Star Date 2024, or to have accompanied <a onclick="window.open(this.href, '_blank', 'width=512,height=360,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false" href="http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/brandosheen.jpg"><img width="100" height="70" border="0" src="http://www.banklawyersblog.com/3_bank_lawyers/images/brandosheen.jpg" title="Brandosheen" alt="Brandosheen" style="margin: 0px 0px 5px 5px; float: right;" /></a>
a young Army captain who looked a lot like Martin Sheen when he sailed into the Heart of Darkness to kill a renegade colonel/beached albino sperm whale who mumbled like &quot;A Man Called Brando,&quot; or to have ridden a crazed water buffalo across a rice paddy while firing an <a href="http://en.wikipedia.org/wiki/M79_grenade_launcher">M79</a> grenade launcher in one hand and a double magazine clipped <a href="http://en.wikipedia.org/wiki/M16_%28rifle%29">M-16</a> in the other, in every single case while also toking the biggest <a href="http://www.a1b2c3.com/drugs/mj006.htm">Thai Stick</a> in Southeast Asia. I'm not saying that there are a lot of <a href="http://vikingphoenix.com/military/veterans/phonyvet.htm">these guys</a>. What I am asking is how can we be expected to believe that so many veterans of our armed forces, many of whom faced physical danger (and not only from John Kerry), need a change of underwear because they live in mortal fear that there's an infinitesimally remote possibility that someone peeked at their personal information? I simply don't buy it.</p>

<p>This entire dust-up is pure politics at every level, except for the average ignorant American, who's being snowed.</p>

<p>Until we start talking sensibly about the risks involved in these incidents and the costs of the remedies proposed, we're going to waste tons of money and even more time. Banks can look to this incident as the worst-case example of potential reputational risk and out-of-pocket costs that can arise from data security breaches and realize that perception, not cold, hard facts, will drive the aftermath of these incidents. Logic will have little to do with it.
</p></div>
</content>


    </entry>
    <entry>
        <title>Overkill At The VA</title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/06/overkill_at_the.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2006/06/overkill_at_the.html" thr:count="0" />
        <id>tag:typepad.com,2003:post-11307800</id>
        <published>2006-06-29T04:08:00-05:00</published>
        <updated>2006-06-29T04:08:00-05:00</updated>
        <summary>Veterans Administration Secretary Jim Nicholson testified before Congress on Tuesday that the Bush administration &quot;was asking for at least $160.5 million in emergency funds for credit counseling and other measures to protect veterans and military troops whose sensitive personal information...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Crime" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Privacy" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="Web/Tech" />
        
        
<content type="xhtml" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
<div xmlns="http://www.w3.org/1999/xhtml"><p><a href="http://www.banklawyersblog.com/.shared/image.html?/photos/uncategorized/indgrp.gif" onclick="window.open(this.href, '_blank', 'width=213,height=392,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img width="100" height="184" border="0" alt="Indgrp" title="Indgrp" src="http://www.banklawyersblog.com/3_bank_lawyers/images/indgrp.gif" style="margin: 0px 5px 5px 0px; float: left;" /></a>
Veterans Administration Secretary Jim Nicholson <a href="http://www.siliconvalley.com/mld/siliconvalley/news/editorial/14912772.htm">testified before Congress on Tuesday</a> that the Bush administration &quot;was asking for at least $160.5 million in emergency funds for credit counseling 
and other measures to protect veterans and military troops whose sensitive 
personal information was stolen.&quot;<em><strong>Besides covering credit monitoring for about half of the 17.5 million people 
whose Social Security numbers were compromised, the money would pay for 
out-of-pocket expenses for those whose identities are stolen, he told a House 
panel.</strong></em></p>

<p>Nicholson said that the $160.5 million wouldn't cover all of the upgrading to security procedures that he intended to implement at the VA in order to turn that agency into a &quot;model for information security.&quot; Also, more money would be needed if the VA decided to extend credit monitoring services for veterans beyond the one-year of protection now being provided.</p>

<p>Is it just me, or does this seem out of whack?</p>

<p>When the theft of the VA laptop was first announced, the VA alleged that the data was stored in a format that made it very difficult to retrieve and use. The VA also stated (with support from local law enforcement officials) that the laptop was almost certainly stolen for its hardware and software, not for its data, that the hard drive was likely wiped clean by either the thief or the immediate purchaser in order to enhance its &quot;saleability&quot; and cover the tracks of the thieves and &quot;fences,&quot; and that it was likely already resold in the black market <em>sans</em> any personal information. In less than a month, we've come all the way from inadequate disclosure of the extent of the data that was contained on the hard drive, to using $29 million of the VA's funds already budgeted for 2006 that the VA claims it wouldn't otherwise use, and asking for over $130 million more from Congress. </p>

<p>I have sources who are retired military officers and non-coms who advise me that the VA could certainly put the existing $29 million - not to mention an additional $130 million or so - to a lot better use than protecting against the &quot;possibility&quot; that data might have been compromised and might be misused. For example, the VA might use it to provide <a href="http://www.southbendtribune.com/apps/pbcs.dll/article?AID=/20060628/Opinion02/606280442/-1/OPINION/CAT=Opinion02">better health care than it's now providing to veterans</a>.</p>

<p><a href="http://www.banklawyersblog.com/3_bank_lawyers/2005/11/data_security_b.html">Last November</a>, I discussed a study by ID Analytics that showed that less than one-tenth of one percent of data security breaches result in a consumer becoming a victim of identity theft or fraud. That's a potential victim pool of 17,500 people, <strong>IF</strong> the data has actually been compromised, which is not certain and, according to the people involved, is, in fact, highly unlikely to have occurred. </p>

<p>As I discussed <a href="http://www.banklawyersblog.com/3_bank_lawyers/2006/06/encrytion_authe.html">a couple of days ago</a>, Professor Fred Cate has pointed out even where crooks steal information and try to use it, they are often unsuccessful. <a href="http://www.hunton.com/files/tbl_s47Details/FileUpload265/1280/Information_Security_Breaches.pdf">According to Cate</a>, data available as of last summer &quot;indicates that 67% of victims of identity-based frauds report suffering no economic loss and paying no out-of-pocket expenses. The costs were usually paid by businesses, and ultimately by all consumers.&quot; We're down to 11,725 people at risk <em>at the outside</em>, not 17.5 million, and even that assumes that the data was, in fact, stolen.</p>

<p>Thus far, no identity theft or fraud has taken place. Anyone care to hold his or her breath awaiting the first incident?</p>

<p>For all that, we need to divert and appropriate (or misappropriate) another $160.5 million. Has anyone in the federal government heard of the term &quot;proportionate response&quot;?</p>

<p>The press reports and public statements on this matter are filled with bureaucratic butt-covering on one side and attacks motivated in most part by pure partisan politics on the other side. There doesn't appear to me to be any thoughtful analysis of the actual risk involved and a measured response to it. An employee took a laptop home in violation of VA policy. He was canned and his boss was canned. That's a good start. Here's the finish: &quot;Don't do that anymore guys, ok? Also, as you're now required to do by <a href="http://www.washingtonpost.com/wp-dyn/content/article/2006/06/27/AR2006062700540.html">OMB Guidelines</a>, encrypt your hard drives. As to any of you vets, if any of you suffer a loss, we'll make you whole. We promise.&quot;</p>

<p>Problem solved. That'll cost you a lot less than $160.5 million. $160 million less, in fact. Best part: I accept U.S. Treasury Notes in payment of my invoices.</p>

<p>Many of the people taking up space in Washington, D.C. could be replaced by cigar store Native Americans and you'd get an immediate step-up in the competence level.</p>

<p><strong>UPDATE 6/29/06:</strong> Lost Laptop Located!</p>

<p>Well, isn't this a happy coincidence. On the day I rant about a wasted $160.5 million, <a href="http://www.marinetimes.com/story.php?f=1-292925-1918735.php">the stolen laptop is found</a> and it appears that the data was never accessed. Now, nobody in their right mind can say you've got to spend money for credit monitoring. Can they?</p>


<p><em><strong>Sen. Larry
Craig, R-Idaho, the Senate Veterans’ Committee chairman, said he
thought the VA had learned some lessons and that recovery of the laptop
could save money if data has not been compromised. The VA then would
not have to proceed with plans to provide free credit monitoring
services for veterans and to pay a company to keep checking for new
credit applications to determine if anyone was trying to falsely use
the identity of a veteran or service member.</strong></em></p>

<p><em><strong>“If
the FBI can confirm that the data has not been removed from the
computer since it was stolen, I think we will be able to save taxpayers
millions of dollars,” Craig said.</strong></em></p>

<p>Tell you what, Lar, even if the FBI can't confirm that the data wasn't &quot;removed&quot; (I think he meant to say &quot;accessed&quot; or &quot;viewed&quot;), there was no justification for the $160.5 million appropriation in the first place, and there is absoultely no reason to even consider it now.</p>

</div>
</content>


    </entry>
    <entry>
        <title>Taking Care of Veterans</title>
        <link rel="alternate" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2004/11/taking_care_of_.html" />
        <link rel="replies" type="text/html" href="http://www.banklawyersblog.com/3_bank_lawyers/2004/11/taking_care_of_.html" />
        <id>tag:typepad.com,2003:post-2785085</id>
        <published>2004-11-20T10:55:54-06:00</published>
        <updated>2004-11-20T10:55:54-06:00</updated>
        <summary>In good news for veterans and for lenders, the US Congress earlier this week passed and sent to the White House the Veterans Benefits Improvement Act of 2004. Among many other things, the Act now allows VA loans of up...</summary>
        <author>
            <name>Kevin</name>
        </author>
        <category scheme="http://www.sixapart.com/ns/types#category" term="Lending" />
        <category scheme="http://www.sixapart.com/ns/types#category" term="VA" />
        
        
<content type="xhtml" xml:lang="en-US" xml:base="http://www.banklawyersblog.com/3_bank_lawyers/">
<div xmlns="http://www.w3.org/1999/xhtml"><p>In good news for veterans and for lenders, the US Congress earlier this week passed and sent to the White House the <a href="http://frwebgate.access.gpo.gov/cgi-bin/getpage.cgi?dbname=2004_record&amp;page=H9754&amp;position=all">Veterans Benefits Improvement Act of 2004</a>. Among many other things, the Act now allows VA loans of up to the Federal Home Loan Mortgage Corporation's conforming loan limit, which is currrently $333,700. This is a substantial increase, and is expected to help many veterans who live in high-cost housing areas. It also extends the VA guaranty for adjustable rate loans through 2008, another important housing benefit to veterans.</p>

<p>Helping our service men and women is always a wise course, but particularly in times such as these.<br />---Kevin Funnell</p></div>
</content>


    </entry>
 
</feed>

<!-- ph=1 -->