I got a letter this week that my identity was compromised when that data tape full of State data was stolen. I just finishing signing up for the credit protection service that the Ohio Department of Administrative Services is providing, and it is slick. This is the first time I’ve seen true three-factor authentication that didn’t require somebody sending me a SecureID card. In order to log into the site I have to answer an automated phone call and provide a PIN – which is the same process that occurs any time someone attempts to get credit in my name. In other words, for someone to successfully steal my identity, not only do they need my personal information, but they also need my phone and knowledge of my PIN. Awesome.
I’m not really concerned about anybody actually managing to extract the data on the tape, but better safe than sorry. I may actually decide to continue this service past the end of the year provided by the State of Ohio.