'Human error' exposes patients' Social Security numbers

07.02.2006

In the Globe incident, confidential information belonging to more than 200,000 subscribers was inadvertently exposed when paper containing Social Security and bank account information was reused to print mailing labels.

In the H&R Block case, the company accidentally embedded Social Security numbers in a 47-digit tracking number on packages used to mail free copies of the company's TaxCut tax preparation software in mid-December. The problem was reported to the company by an affected individual shortly thereafter, and letters were sent to all affected persons on Dec. 22, said H&R Block spokeswoman Denise Sposato.

The problem was the result of an "inadvertent human error" and affected only a small percentage of former H&R Block clients, she said.

"The Social Security numbers were embedded within this 47-digit string. They were not broken out in any way shape or form," making it extremely difficult for anyone to even notice the error, Sposato said. In fact, less than 10 of the affected individuals detected the problem on their own, she said.

"We've been around for over 50 years, so if anybody knows about the sensitivity and confidentiality of financial data, it is H&R Block," Sposato said. "This was totally contrary to H&R Block's policies and procedures."