From CBS News:
Highly sensitive information, including Social Security numbers and bank account information, was mailed out to the wrong recipients in the Delaware Valley. The mix-up created confusion and concern that the mistake could have led to identity theft.
The Maggitti family from Broomall said they got paperwork back after filling out an online application for Social Security benefits for 18-year-old Anthony Maggitti Jr., but there was one glaring problem.
"I started reading it and realized this didn't make sense. This doesn't seem to be his information," Colleen Maggitti said. "So I saw that on the top it was supposed to go to a person named Holly, who does live in this area, but that was all of her information." …
CBS News Philadelphia contacted the Social Security Administration, which said in a statement, "Important to note that this mistake was an isolated incident and the result of human error. The incident is being investigated."
While the administration wouldn't say how many people were affected, they said it was a limited number and corrective actions were being taken. …
By the way, I wouldn’t post this if it only involved a couple of people but it sounds like there’s more involved. Isolated but not that isolated.
Also, by the way, many years ago I discovered a much larger privacy problem at Social Security. When Social Security introduced an electronic data system that most Social Security attorneys call ERE it prepared a demo that it handed out on a CD showing how the system worked. They used real claimants’ records but tried to redact them. Unfortunately, they did a poor job of redaction. PII was openly visible in several places. I happened to be one of the first people to receive the CD. I imagine at least a few dozen other people received the CD at about the same time. I was the one who noticed the problem and notified the agency. My understanding was that they were abashed. I know they tried to get all the CDs back.



