Hey look, the A2 News commented on the AOSS fiasco broken here

Evidently, some medical records went missing from the U-M Health System network at satellite offices. This actually caused the Ann Arbor News to go back and check on OTHER incidents of data breaches at U-M and GUESS what they found (moreover HOW did they find it)? They found the massive data breach at the AOSS Department.

YCD will not rehash it in this post but will give you the link to the original story that broke this wide open.

Well done Ann Arbor News, glad YCD could help!

Pfizer puts employee data at risk, DOES RIGHT THING, are you listening AOSS?

In the world exclusive broken here (it had a flashing light and everything) on the Ypsi City Desk this week, where the University of Michigan's AOSS Department suffered a massive data breach and did NOTHING for the victims of THEIR sloppy and unprofessional mistake. Told the vics to suck an egg.

Pfizer recently admitted a data breach by a former employee. In the first news story about this, here's Pfizer's take on corporate responsibility when it comes to personal data:

"Pfizer has contracted with Identity Safeguards (IDS), a credit monitoring and protection company, to assist affected individuals. The company is providing two years of credit protection support services, including For information on credit monitoring, call Identity Safeguards at ____________"

Wow, did you see that Tamas Gombosi, head cheese at Atmospheric, Oceanographic and Space Sciences? See how that's handled by RESPONSIBLE people?

MASSIVE data breach at U-M's AOSS Department

Now first off, you won't find this story in the Ann Arbor News nor the
Michigan Daily. WHY won't you find it there? Ask them. BOTH were alerted to this story when the Department of AOSS issued letters to those who had their data (including social security numbers) hacked from somewhere overseas this past winter. BOTH News outlets were told of this story, yet neither wrote anything about it.

Ypsi City Desk WILL write about it.

For quite a while a database was being built on former and current employees at the Department of AOSS (Atmospheric, Oceanic, and Space Sciences), part of U-M's School of Engineering. Even though the individual entrusted with building the database KNEW the dangers of including employee SS numbers he went ahead and included them anyway. Warnings were ignored and the database was, you guessed it, HACKED. Into the hackers hands went all kinds of former and current AOSS employee data INCLUDING Social Security numbers.

What was the AOSS's decision? To send out letters telling you YOUR information was breached. They would do no more on this. Ypsi City Desk was told the Department would not even spring for credit monitoring for one year as they didn't want to, according to Denise Moore, Department Manager; "set a precedent".

A precedent for what? Living up to your RESPONSBILITIES? YOUR worker (and Ypsi City Desk DOES know his name) built a hackable database that ran an out of date obsolete version of the software on an out of date obsolete OS with social security numbers that never should have been there to begin with. AOSS simply gives a note and a "Best of Luck" speech to violated current and former employees.

Ypsi City Desk has also learned that any letters that came back undelivered (as the person in question may have moved) nothing further was done by AOSS to contact them.

The level of apathy towards current and former employees is off the scale at AOSS.

Not willing to do the right thing, the Department of AOSS everyone. Why not tell Chief Head-in-the-Sand Department Chair Tamas Gombosi (and the decision NOT to compensate those who had data hacked came from Mr. Gombosi--Ms. Moore confirmed this to the YSD earlier this year) what you think.

tamas@umich.edu or call him:
(734) 764-7222