Veterans sue Pentagon over breach of privacy
WASHINGTON—A veterans organization is suing the Pentagon for exposing private details about troops’ military service on “a truly massive scale” due to lax security on one of its websites.
The lawsuit filed by Vietnam Veterans of America charges that a Defense Department website “is currently exposing private details about the military service of millions of veterans to anybody at all, anonymously, for any purpose.”
The shoddy security measures allow virtually anyone to access sensitive data about veterans’ records by typing in a name and date of birth, which are easily available on the internet. This gives “easy access to information about essentially all veterans or service members in the system” and thus violates the Federal Privacy Act, alleges the suit, which was filed last week in federal court in New York.
The Servicemembers Civil Relief Act website, which according to the Pentagon receives more than 2.3 billion searches a year, is meant to be used by authorized institutions like banks to confirm the active-duty status that entitles service members to certain protections.
Instead, the information is available to con artists and scammers who can use it to impersonate government or other officials and gain veterans’ trust by discussing details of their service that only authorized organizations would have.
Thomas Barden, a veteran of the Vietnam War who served in the Air Force for 21 years, found that out firsthand.
The plaintiff in the suit received a call from someone supposedly affiliated with Microsoft in March 2016. Since the caller knew all kinds of personal details about Barden’s military service, Barden thought he was authorized by the government.
The scammer convinced him his computer was at risk, and sold him firewall software to protect it.
Nine months later, the scammer gained remote access to the computer, locked him out, and threatened to hold his files for ransom unless he paid up.
Worried about data theft, Barden broke the hard drive into pieces and was so concerned about his privacy that he threw them into different trash cans over several days. Since then, he has continued to receive harassing phone calls from the same scammers, causing him “significant anxiety and stress,” according to the lawsuit.
Impostor fraud and identity theft aside, the group says that Vietnam veterans in particular want to keep details of their military record private, having “experienced the sting of rejection and public scorn on account of their service.”
Since they draw a steady, guaranteed income from the government, veterans are an attractive target for scammers. The numbers have increased in recent years, from 58,175 complaints by veterans in 2014 to 69,801 in 2016, according to the Federal Trade Commission’s Consumer Sentinel Network.
“Veterans are disproportionately targeted by scammers and identity thieves,” Vietnam Veterans of America President John Rowan said in a statement.
The Pentagon “is fueling the problem by leaving veterans’ private information easily accessible on the internet (and) has refused to properly secure veterans’ information,” he said. “We are asking a court to order them to do so.”
The Defense Department has refused to make any changes since being alerted about the problems with the site, the suit says.