Identity Thief at Work

Identity theft is a societal problem and can occur in many places and by many means, including in the workplace. At work, it can happen by stealing vital information from employer's records. These records can be payroll and employment information and even customer lists. And those employees that can obtain these records can sometimes be at the very bottom of the totem pole.
Whether we're an individual working for a company or we are the company owner, we need to be aware of this growing trend and what we can do about it.On a large scale, if a big company is affected, it can result in negative publicity which would in turn affect sales, hiring and retention.

What can we, as an individual, do about this growing trend? We probably already know the obvious: shed documents with personal information, don't carry our social security card in our wallets, have locked mailboxes, and even monitor our credit reports. But the problem -- which seems to be beyond our control -- lies in crooks who obtain this information from businesses that have collected personal information for legitimate reasons and then they sell this information to more crooks that use it and steal our identity. And then with this new identity, thieves can open new credit card accounts, apply for loans, write bad checks, rent apartments and the list goes on. Individuals who have been educated on identity theft or who have had this occur in their life will scrutinize those companies that have their personal information. Because of the bad seeds, companies need to raise the bar both for their employees and clients.

So if we're looking at identity fraud from a business owner perspective, what can we do about it? Informed employees and clients know that their personal information is only as safe as the association protecting it. A solution would be to offer identity theft protection as a benefit, much like health insurance. This offer would be unique to the company, whether the company pays for part of it, all of it, or merely provides the information of how to obtain this protection. The key is in the offering so employees/clients are aware of their choices and can then make an educated decision whether to accept or decline. Too much cost, we may think. But actually, it can lower our costs whether the employee has coverage or not. With coverage, there will be less time spent in restoring their identity. Without coverage, our liability has changed. We've done all in our power to protect our employees by informing and offering. Well almost . . . There are still numerous ways where we must be proactive in protecting our employees and clients.

1. Perform background checks on employees who have access to personal information on other employees/clients, even temporary workers. And limit this access where we can.




2. Use employee identification numbers that are different to social security numbers to recognize employees on paychecks etc.




3. Shred confidential documents and have specific guidelines for all employees to adhere to.




4. Use passwords and encrypted codes when confidential files are stored on the computer.




5. Be vigilant in educating staff on identity theft.

The Bank of New York and its employees are a perfect example of a workplace where large scale identity fraud has occurred. Adeniyi Adeyemi, a computer technician employed by a contractor who worked for the Bank of New York, has been charged with allegedly stealing the identities of over 150 employees and then with these identities, stealing over a million dollars from non-profit groups and charities and the employees themselves. Adeyemi now faces up to 25 years in prison. He obtained his information from the Technology department, opening additional bank accounts with this information to receive the stolen money. This all occurred over a seven and a half year period. The Bank of New York spokesman says that they are fully cooperating, but I wonder what the long-term ramifications of this will be (Read the Wall Street Journal article here).

It's always best to be insightful. But having insight is useless unless we take action by protecting ourselves, our employees and our company with our eyes wide open.

The Identity Theft Victim & Their Rights

So here's an ironic story for you about identity theft. The last blog I wrote on identity theft was on a Friday. I wrote about what steps you can take to protect yourself from identity theft -- especially mail identity theft. I then went to a nice barbeque party and watched my kids swim with their friends. Didn't really enjoy my turkey dog -- an attempt to be healthier -- but have decided since then that I'll stick to all-beef franks. On the way home, I grabbed my mail, tucked the kids in bed, and then read my mail. And to my horror, received a letter from my credit card company who was putting me on alert as one of their former employees had stolen personal information from some accounts and mine happened to be one of them. I looked at my husband, thinking perhaps this theory of Law of Attraction might actually be valid, and then began a scenario of what-ifs with this villain using my very name to open up accounts, buy a home etc. After wallowing for seconds, I called the fraud alert hotline. So they've caught the thief but the investigation is ongoing and who knows if he's sold the information already. What I realized is that it's one thing to discuss identity theft and the steps to take, and it certainly is another to feel yourself vulnerable and at risk -- and of no fault of your own. My husband saw the rainbow of it all -- well, now you'll have another article to write -- so here I am.

There are certainly many steps you can take to protect yourself from not carrying your social security card in your wallet to having a secure mailbox. But what about if you give trusted information to a company -- like a credit card company -- and one of their employees steals it. There's nothing you can do after that point. You hope that the company has done background checks, employment screenings, behavioral assessments, but there are always risks -- which is what I discovered. What is immediate action you can do once you've realized someone has stolen your information? Of course if it's a stolen wallet, you notify banks, credit card companies, social security etc. But what else should you do? What are your rights?

1. Immediately call the nationwide consumer reporting companies and place a fraud alert in your file. Everyone has the right to do this and this lets potential creditors know that you may be a victim of identity theft. Therefore, this makes it much more difficult for someone to get credit in your name. There are three nationwide consumer reporting agencies and if you contact one and place a fraud alert -- they'll contact the other two. They are Equifax: 1-800-525-6285; www.equifax.com, Experian: 1-888-397-3742; www.experian.com, and TransUnion: 1-800-680-7289; www.transunion.com. These fraud alerts will be in your file for 90 days. Extended alerts are also possible, but an identity theft report is required. For more information, go to www.consumer.gov/idtheft.
2. You have a right to obtain a free copy of your file disclosure. What is a file disclosure? This is the information in your file at each of the 3 nationwide agencies and will help you detect if fraudulent accounts have been opened in your name. Go to www.ftc.gov/credit.
3. If fraudulent accounts were opened using your information, you have the right to get hold of those documents. Go to www.consumer.gov/idtheft.
4. You have a debt collector harassing you? And if you believe these debts were racked up by an identity thief, the debt collector has an obligation to tell you the amount of debt and the name of the creditor. You also have the right to have the consumer reporting agency to block file information which is a direct result of identity theft. Of course you must prove this with your identity and a copy of your identity theft report. Once this is done, a person or business with notice of the block can't sell, transfer or place the debt for collection. But even before this, you have the right to prevent businesses reporting information about you to consumer reporting agencies. You must then provide information to the businesses -- via a specified address given by the business that reports information to the consumer reporting agency -- by providing an identity theft report. So whatever step you are on -- via the business, the consumer reporting agency and even the debt collector -- you always have rights.

Clearly, no one wants to be a victim of identity theft, but if you have tools in hand and are aware of what actions need to be taken and what rights you have -- you can reverse the scenario and stop the thief in his tracks. An even simpler way is to set up with a company who provides identity theft services. There they will help prevent and also monitor your accounts if any significant changes occur. A word of caution, I'd do your research first -- before and if you become a victim. There are companies out there who provide the same service but for a much better cost. When we're desperate, we'll take the first monitoring bidder whatever the cost. So the message here? Prepare, prevent and monitor.