Taxes are filed and it’s that time of year when it’s not too hot and not too cold to venture into the storage unit or attic to take stock of files that still need to  be stored and files that are obsolete and should be destroyed.  Many of us need to make room to get the most recent boxes out of our way.

On-site shredding is the most secure and efficient way to safely and quickly dispose of obsolete paperwork.  Whether it’s proprietary information or client information, it is in a business’ best interest to shred any and all personally identifying information.  HV Shred aims to make the whole process simple and straight forward.

HV Shred is a NYS licensed, on-site mobile document shredding company.  All shredding is done ON-SITE, in the parking lot or we will even meet you at your storage area.  Clients are invited to witness each shredding service on the color monitor mounted to the side panel of the truck.  As part of our service, we provide a certificate of destruction for your records which serves as hard copy support that clients are doing their due diligence to comply with the federal regulations which require proper disposal of consumer private information.

Helping to protect the environment, we recycle all shredded paper!

Security, compliance, and environmentally friendly.

For more information, please visit www.hvshred.com and submit a request for a free quote.

We hope you have come to expect valuable suggestions for best practices in Identity Theft Prevention from the HV Shred blog.  Along those lines, what follows are some reminders about taking necessary precautions to secure confidential information.

First, run a virus scan on a regular basis.  Many people only ever run a virus scan on their computer when they think something is wrong. By constantly running virus scans, you ensure that nothing can get a foothold on your computer. In addition, by updating your anti-virus software constantly, you ensure that newer viruses can’t get through, providing you with identity theft prevention.

In addition to keeping anti-virus software up to date, it’s a good idea to make sure that every program you use is as up to date as possible. People looking to steal your identity will make use of outdated patches to hack into your system. Don’t give them the opportunity. In particular be sure to update your web browser as well as operating system every time they require it.

Another way to limit exposure is to be extra mindful of the emails you open.  Email messages often include links that will install invasive software onto your computer, making it vulnerable to future attack. Do not open messages from people you do not know, regardless of what they say.

Similarly, be wary about clicking on a website you are unfamiliar with. Some websites will install programs onto your computer when you click a link. In addition, they can corrupt your web browser, logging everything you type and then stealing that information. This can include user names, passwords, and bank information.

Identity theft is common, and the best thing you can do is to be cautious. Treat every good offer or threat with a grain of salt, keep your software up to date, shred all documentation with sensitive information, and stay safe.

The more sensitive the information, the more important it is to have it destroyed securely.

HV Shred will help keep you compliant and safe.  Please visit www.hvshred.com

Workplace identity theft is a growing problem.  To combat the issue, we need to hone in on how the thieves are obtaining our private information.

The most common victims are little organizations with fewer than a hundred employees, in line with the most recent study by the Association of Certified Fraud Examiners Report. Typically, smaller companies have fewer controls, limited policies, and less training/coaching on handling private information than larger companies.

Handling personal, sensitive & confidential information properly is critical and the law. Inadequate business practices might result in liability suits and loss of consumers.

What follows is some tips to shield your customers, staff, & company:

Shredding all unneeded client and proprietary paperwork is not just good practice; it is the law. Using a reputable shredding company takes all the worry off your shoulders and can give you peace of mind and security.

Be wary of con-artists–if someone calls or emails asking for private information, claiming that they are from the IRS, do not give it out. The IRS states that they only ask for that information by mail. There has been a huge rise in this approach over the past 12 months.

Be mindful of employee access to information.  A lot of identity theft occurs when employees give (sell) sensitive information to these crooks. In a recent case starting in Florida, a human resources worker was paid $3,000 for co-workers personal information. These thieves used this information to obtain a driver’s license, open a new credit card, and/or trick a retailer into giving them the credit card number.

Spot check to make sure everyone is following the policy & procedures on handling sensitive information.

Another best practice is splitting duties. By splitting & separating the information that employees can access, you cut down on the chances an employee will be able to sell the information without someone noticing.

Train everybody in the company on correct ways to handle, track, and eliminate sensitive data: Do not leave this to chance. Put together a training program for handling this information.

Create a hotline for reporting suspected deception: Have a safe way for honest employees to report abuse.

HV Shred can help keep you compliant and lessen the burden when handling consumer’s sensitive information. Visit www.hvshred.com

The Emergence of the Class Action Data Breach Lawsuit:  Just one more reason it is imperative to take all means possible when it comes to protecting customer information.  A recent $3 million class action data breach lawsuit awarded by a Florida court in mid-March of 2014 sets the stage for many more such settlements.

The suit was the outgrowth of a laptop lost by AvMed, a Florida-based health insurer. According to widely published reports, after having been dismissed twice by lower courts, the U.S. Court of Appeals for the Eleventh Circuit allowed several of the claims, including those pertaining to negligence and breach of contract, to remain, and remanded the case back to the district court. The failure to dismiss the claims, a first in this type of legal action, is what then promoted AvMed to seek a settlement.

According to industry expert Bob Johnson, “Up until this Florida ruling, however, every such attempt had been summarily dismissed based on the absence of demonstrated financial damages. That’s why this is so significant. For the first time in history, with no damages directly related to the breach, the court allowed the case to proceed.”

This ruling could mean that in addition to the cost of breach reporting, credit monitoring and embarrassing headlines, class-action awards are more likely to be a costly consequence of data breaches in the future. Second, this precedent will provide an incentive for lawyers who specialize in class-actions to bring more such cases.

Following up on our recent posts on The Red Flags Rule, the key is better policies, better employee training, and heightened awareness of safe storage and disposal of customer data.

For more information on on-site shredding service and best practices in identity theft prevention, please visit www.hvshred.com

Continuing with our goal to educated businesses on proper compliance with the Red Flags Rule, today is an overview of the 4 step process.  We will cover each step in more detail in the coming weeks.  For now, here is an overview of the 4 steps:

Step 1: Identify relevant Red Flags- the potential patterns, practices, or specific activities indicating the possibility of identity theft.  These include taking into account risk factors and sources of red flags,.

Step 2: Detect Red Flags: Sometimes, using identity verification and authentication methods can help detect red flags. Consider whether business procedures should differ if an identity verification or authentication is taking place in person, by telephone, mail, or online.

Step 3: Prevent and mitigate identity theft: Upon spotting a red flag, be prepared to respond appropriately. The response will depend on the degree of risk posed. It may need to accommodate other legal obligations, like laws about providing and terminating service.

Step 4: Keep the program up to date: The Rule recognizes that new red flags emerge as technology changes or identity thieves change their tactics, and requires periodic updates to your program. Factor in personal experience with identity theft; changes in how identity thieves operate; new methods to detect, prevent, and mitigate identity theft; changes in the accounts offered; and changes in the  business community, like mergers, acquisitions, alliances, joint ventures, and arrangements with service providers.

Tune in again next week for more details.  Our goal is to help our business community with compliance which will, of course, also help protect every individual in the community as well from identity theft.  More at www.hvshred.com