Editorial: Keep SSNs secure

[CommunityEditor]

The Defense Department is in the midst of a multiyear effort to eliminate full Social Security numbers from ID cards.

The new Common Access Card issued to service members does not include SSNs. ID cards for family members and retirees will also drop SSNs, or at least all but the last four digits, within a few years.

Many states no longer use SSNs for driver’s license numbers.

The reason is simple: In the digital age, a Social Security number is all a savvy thief needs to steal someone’s identity and ruin his credit rating.

“Today, all of our [computer] systems can ‘talk’ to each other, so we don’t necessarily need to know all of that information printed on your card,” Mary Dixon, the Defense Department’s Common Access Card program manager, said in April.

Not quite all systems. The Army and Air Force Exchange Service and Navy Exchange Service Command still require patrons paying by check to produce a document showing their SSN. AAFES even requires an SSN to process a refund on a returned item.

That means that even as SSNs vanish from ID cards, the exchanges are forcing patrons to physically possess some other crucial document, such as a Social Security card or a passport, in order to write a check or get a refund at the stores.

The AAFES and NEXCOM policies are defeating the Defense Department’s efforts to get Social Security numbers out of public view.

No commercial retailer would require customers to verify Social Security numbers. No military exchange should, either.


Article: http://www.armytimes.com/community/opinion/army_editorial_ssns_082508/

[WIRETIRE]

The military ID Card sould be sufficient with the option of a high priced sale (item) being verified with use of SSN as back up. Any retailer, military or civilian , has the right to insure that the person purchasing the item is the authorized indvi.

[CommunityEditor]

Promotion selection lists containing the names and Social Security numbers of more than 50,000 active-component noncommissioned officers were compromised earlier this year and in 2005, according to officials familiar with an ongoing Army investigation.

The 2008 sergeant first class list that was compiled by a board that met in February initially was the subject of the probe. The public version of that 8,620-name list was released by Human Resources Command March 20.

Eight days later, Army officials at Criminal Investigation Command, commonly know as CID, notified Human Resources Command that the “close hold” version of the list made available to commanders and their designated representatives in mid-March had been improperly released over the Internet, according to Brig. Gen. Reuben Jones, adjutant general of the Army.

Just days after opening an investigation into the matter, CID officials determined that the prepositioned 2005 master sergeant list also had been compromised.

Human Resources Command was notified of that finding March 31.

Jones, whose directorate oversees the management and distribution of officer and enlisted promotion materials, said the CID notifications were particularly troubling because at that time, prepositioned lists contained the names and Social Security numbers of all soldiers — non-selectees as well as selectees — considered by a board.

Jones said that within 48 hours after being notified, the promotions division of Human Resources Command sent e-mail notices via Army Knowledge Online to all soldiers whose names were on the prepositioned lists.

That was a major undertaking, as the prepositioned sergeant first class list contained 30,812 names, and the master sergeant list 20,048.

The command letters alerted soldiers to the unauthorized disclosure of their Social Security numbers, apologized for the compromise of that information and provided information about measures they can take to help protect against possible identity theft.

“We deeply regret putting soldiers and families at risk through the unauthorized disclosure of personal identity information, such as happened here,” Jones said.

“So far we do not know of any cases of identity theft associated with these lists,” he said.

Both CID and Human Resources Command declined to identify the field commands involved in the unauthorized disclosures. However, Jones and Chris Grey, a CID spokesman, said it would be up to the commanders concerned to pursue military legal proceedings if people responsible for the disclosures are identified.

The Army will continue to allow designated commanders access to prepositioned lists, but in a major change from past practice, “prepositioned lists of any type or component will not contain any part of a soldier’s Social Security number,” according to a notice recently sent to all field commands.

The same directive also noted that access to prepositioned list information “is a privilege and it requires a general officer or senior executive service official to request access for primary and alternate designees.”

These designees, who Jones calls “trusted agents,” will lose preposition access for their command if they violate the close-hold restrictions imposed on such rosters by the Army.

“What’s so very disturbing about the lists in these two cases is that it appears from the investigation that the trusted agents are the ones who violated their commanders’ trust.”

Jones said the Army had been putting Social Security numbers on prepositioned lists to help commanders identify soldiers considered by a board, both selectees and non-selectees.

He noted that many commanders want to prepare congratulatory notes to soldiers who are selected for promotion, and to prepare themselves to talk to soldiers who are not selected for advancement.

“Social Security numbers can be very helpful in this process, especially if you have several people in the command with the same name,” Jones said.

The decision to stop using Social Security numbers on the prepositioned lists “was a difficult one for us,” Jones said, “and this means commanders and trusted agents must use other data items (specialty codes, unit codes, rank, etc.) to identify soldiers.

“We have established some procedures to help them do that, but of course the long-term solution is DIMHRS (Defense Integrated Military Human Resources Management System), which will use an employee number rather than Social Security number,” Jones said.

Grey said CID is assisting commanders in their probe of the compromised lists.

Because the cases do not involve the type of criminal activity normally in the purview of the investigative agency, CID officials do not control the investigation; field commanders do.

Sources noted that investigators are looking at other lists to determine if they were compromised.

The prepositioning system is used for brigade and battalion command selections, senior service college lists and promotion lists for the ranks of captain through colonel, the chief warrant ranks of CW3 through CW5, and NCO lists in the ranks of sergeant first class through command sergeant major.

CID initially was alerted to the list problem by Army Knowledge Online, which detected an unusual amount of e-mail traffic with the prepositioned lists and Social Security numbers attached.

E-mails for the sergeant first class lists numbered more than 500, and were sent to military and civilian addresses.

While investigating the E-7 list problem, CID agents found the 2005 prepositioned master sergeant list in a folder on a peer-to-peer, or shared, Web site.


Article: http://www.armytimes.com/news/2008/08/army_security_breach_082408w/

[Proud Mom]

The military ID card shouldn't have to have a SSN. At WalMart or Target you can return or purchase anything with a credit card and drivers license as a picture ID. Or a check and ID.
And military are always the target of scams, computer theft etc...protecting their privacy and identity is important.

[CommunityEditor]

The 30,812 candidates for sergeant first class got a dose of bad news earlier this year, whether or not they made the cut for promotion: Their names and Social Security numbers were compromised when the list was inadvertently posted on the Internet following a February selection board.

The source of the breach is still undetermined, but Criminal Investigation Command agents have since discovered that a 2005 list of 20,000 master sergeant candidates also was compromised.

Fortunately, there are no known incidents of identity theft tied to this breach. But it is nevertheless dumbfounding that the Army continues to use SSNs so widely.

Local, state and federal agencies, as well as commercial businesses, have been scrambling to scrub SSNs from personal information exactly because it can serve as a digital key that can ransack bank accounts and trash credit ratings. The Defense Department’s new Common Access Card does not use SSNs, for example.

So it is good to see that the Army says it has learned a lesson and has removed SSNs from future promotion lists.

Now top commanders should do two more things:

First, they should ensure soldiers whose identities were compromised have access to free credit reports for at least a year so they can monitor and flag any suspicious activity.

Second, they should seek out and fix other potential points of failure. They can start at Army and Air Force Exchange Service stores, where customers are required to show an ID with an SSN when paying by check or seeking refunds. Because the new official military ID no longer includes the number, AAFES is demanding a second form of ID, such as a Social Security card.

That’s ridiculous. In this day and age, there are too many other ways to ensure a soldier’s identity.


Article: http://www.armytimes.com/community/opinion/army_editorial_ssn_090108/

[WILEYCB]

Most members of the military are fed up with the crap we have to deal with at most AAFES stores. The last time I checked the military ran the show in there community. If AAFES continues to refuse to change there policy on SSNs then I recommend they pack there crap and the contract goes to another company. It would be a hassle but I bet Wal-Mart/Target would do what ever needed to be done to help make the transition easier for us if they got the contract.

[mfjdspence]

AAFES needs to stop sending its proffits to services organizations and send it back to the "stock holders" who are also known as us. With the money coming back directly vs. indirectly, we can better control programs that deserve to survive and decide vs. being told that our dividend helped reduce meal costs by 2 bucks at a place I eat at only 6 times a year. At our installation, we got back about $1.5M last year sent directly to our Services organization who spent the money on their proffit generating facilities. If they gave that money back to the members stationed at the base, we would have got back about $400 a piece. That sounds like a better deal to me and would maybe make me feel better paying higher costs knowing that the money will come back to me anyways.

[Okie]

This is WAY overdue. At least I have an option to not shop at AAFES.

My SSN has been compromised by the Air Force or the GTC people (under contract to the government) no less than 4 times. My interaction with all of these entities is manadory if I want to keep my job. Right on the SSN card, it says it's not to be used for identification purposes. I can understand Finance needing it for tax purposes, but that's about it.

[nathan_usmc]

I understand that it would take a little effort from several different organizations, but wouldn't most of the problems with PII be solved if servicemembers were given a service number other than their SSN. If we could use another nine digit number to identify ourselves there would be no risk of identity theft. Commands could post that number on promotion lists, the exchange could ask for that number, etc. Of course we would still give our social to Admin to be used on security clearances and W-2's, but in every other way we could use our "service number." That number would still be protected as dliigently as our social becuase it would be as unique and powerful as far as the military is concerned, but if a momentary lapse in judgement were to result in its public release, the results wouldn't be as tragic.

I admit I may be naive, but is there any reason why this wouldn't work?

[nicwks]

AAFES needs to stop sending its proffits to services organizations and send it back to the "stock holders" who are also known as us. With the money coming back directly vs. indirectly, we can better control programs that deserve to survive and decide vs. being told that our dividend helped reduce meal costs by 2 bucks at a place I eat at only 6 times a year. At our installation, we got back about $1.5M last year sent directly to our Services organization who spent the money on their proffit generating facilities. If they gave that money back to the members stationed at the base, we would have got back about $400 a piece. That sounds like a better deal to me and would maybe make me feel better paying higher costs knowing that the money will come back to me anyways.

The only service organization that aafes sends any profits too is MWR. So unless you would want to spend more for a lot of programs on post instead of them being readily accessible and affordable to all ID card holders ,no matter what the rank, then you shouldn't have a problem with the profits being returned and staying on the post you happen to be at. Perhaps you should do a little research there and get all your facts before you gripe.
as a former aafes manager I don't think anyone agrees with the use of the ssn's, but having worked for them I can also say I saw plenty of abuse of patron priveleges and people abusing return polices, yes even stolen goods once. The system just needs to be modernized. AAFES has accomdated service members for years. Perhaps we need to go back to when it was only ID card holders period who could use the px . When they started getting lax with this privelege is when the savings that you use to have went out the door. And you don't pay taxes on purchases so we are griping about what?

[MATTSTONGE]

I am making a concerted effort to avoid buying anything from AAFES if at all possible. I try to get all my clothing items on line from Vanguard or whoever. AAFES has several policies that are not consumer friendly and honestly, their prices are not all that great. I've sent in several comment cards and left good contact information, and have never been contacted in response. I can only assume that either 1) no one cares, or 2) they are inundated with negative comments and they can't possibly respond to them all.

WILEYCB:
They're = they are
Their = Belongs to them
There = a place away from here

[Old School CC]

GAS, GAS, GAS

AAFES controls the prices on base as well I remember when gas prices where lower on base than downtown. Now AAFES charges the same or 1-2 cents more.

Also I find this one a particularly annoying item. Propane, exchanging a propane tank on base costs $5 more than anywhere else in the local area.

Lastly, a 12 pack of coca-cola $4.35 at the shopette. Downtown $3.00

Have I complained to AAFES, YES. Has AAFES done anything about it. NO. they say they charge the same as other stores in the area. I am welcome to do a "price challenge".

AAFES can keep there stuff. I do not buy from them as I know where to find what I need for less. Tax free or not they are no bargin at these prices. AAFES makes no effort to be competative. Their buyers have some of the worst taste in clothing I have ever seen.

Another Pet-peve, when stationed at smaller bases I would go to the BX. The items in the smaller BX is so substandard. AAFES sends the "cheep" items to the smaller stores and saves the quality items for the larger stores. When I am in a remote location I want to go to the BX and buy nicer items that I can't get from the Local Walmart.

This orginization has been around for far to long and is to stuck in there ways. My wife worked for them for a few years and I saw just how bad they are.

OK, I am jumping off the I hate AAFES band wagon.

[THELADYKT]

The only service organization that aafes sends any profits too is MWR. So unless you would want to spend more for a lot of programs on post instead of them being readily accessible and affordable to all ID card holders ,no matter what the rank, then you shouldn't have a problem with the profits being returned and staying on the post you happen to be at. Perhaps you should do a little research there and get all your facts before you gripe.
as a former aafes manager I don't think anyone agrees with the use of the ssn's, but having worked for them I can also say I saw plenty of abuse of patron priveleges and people abusing return polices, yes even stolen goods once. The system just needs to be modernized. AAFES has accomdated service members for years. Perhaps we need to go back to when it was only ID card holders period who could use the px . When they started getting lax with this privelege is when the savings that you use to have went out the door. And you don't pay taxes on purchases so we are griping about what?

Stop charging us extra for stuff at AAFES/MCSS……Stop giving money to the bowling alleys etc stateside…. Let them run a business…. If they can’t compete with companies downtown then so be it. CLOSE.... I’d rather pay competitive costs than increased ones in one place to get discounts in others that I and many other might not even use.

Overseas/Downrange is different because many companies are not allowed into those areas/countries. But stateside should be simply competitive. And while I'm not sure, I'd bet they don't have to pay rent for thier facilities either which gives them an advantage over the civilian businesses (Utilities??? not sure there either)


I know that AAFES gives money to services……MY MONEY AND EVERYONE ELSES MONEY…. to services. So I’m paying for the “cheapness” of the bowling alley, theater, marina, etc etc etc….. Not like they are doing it out of the goodness of their hearts……Look at the signs at the BX etc……Support us cause we give money to services……Yea OUR MONEY.

Oh the tax free thing is moot when they jack up thier prices to more than offbase which offsets the point of having the tax free. On really big ticket items it may make a difference, but on the majority of the regular day to day goods, it doesn't.

[THELADYKT]

Back to the subject of the thread.... If walmart, Target and everywhere else these days can figure out how to not use SSNs, then AAFES shouldn't have a problem doing it.

Use a drivers licence number if you must...... Or instead of putting it on every single check, have a form you fill out once in customer services and issue a check cashing card......Having the card verifies that AAFES has your info on file somewhere so it doesn't have to be written on the checks themselves.

[olderchief]

When I joined the Navy in 1960 (yes, I am an olderchief, who, by the way, does not understand "hazing") we were given Service Numbers immediately after the oath and they were not the SSN (we had to memorize the Service Number before we got to boot camp). These numbers, of course, were on every piece of paper and our ID cards. Then someone came up with the idea of using the Social Security Number instead of the Service Number. (this may be the same person who decided that the E6 & below needed to get out of the traditional bell bottotms and cap and look like doormen, but that is another story...)

It seems that the Government, which requires everyone else to not use the SSN on anything, uses it on everything. Just check your Tricare, Delta Dental numbers if you have dependents or are in those programs. The solution, of course, is to go back to the Service Number. When I retired the digital age was just in its beginning and Admiral Grace Hopper was handing out lengths of wire representing how far an electron goes in a nanosecond so it was not really too important to have the SSN secure but now with ID theft so easy I don't like to show my retired ID card because, yes, it has my SSN on it!

The sooner the Government takes the steps to protect the active duty, reservists, and yes, us retired service members from identity theft by elimentating the SSN on ID cards the better. And, yes, I still know my Service Number.

[THELADYKT]

It seems that the Government, which requires everyone else to not use the SSN on anything, uses it on everything. Just check your Tricare, Delta Dental numbers if you have dependents or are in those programs. The solution, of course, is to go back to the Service Number. When I retired the digital age was just in its beginning and Admiral Grace Hopper was handing out lengths of wire representing how far an electron goes in a nanosecond so it was not really too important to have the SSN secure but now with ID theft so easy I don't like to show my retired ID card because, yes, it has my SSN on it!

The sooner the Government takes the steps to protect the active duty, reservists, and yes, us retired service members from identity theft by elimentating the SSN on ID cards the better. And, yes, I still know my Service Number.

I agree with you. The only thing I disagree with is the assertion that only the government uses SSNs. Every bank account I have, credit card I applied for, insurance for anything, you have to give your SSN. BUT you are correct if you are implying that only the government forces us to put it on common cards/identifying materials.

[olderchief]

My mistake. You are indeed correct.

I was just looking at the government and military end of things. You are correct about banks, insurance, credit cards requiring the SSN. Darn, and being a retired Chief I thought I was infallable. (but, heck, I wasn't even when I was on active duty).

Thanks for the feedback.

[armysoldierssweetheart]

AAFES claims to have low prices but they don't and their selection isn't all that great either. I would love to sit down for one day and help their buyers select items that would sale better in their stores. I would take out the Coach brand purses (just to tempting for people who really can't afford them). The selection of boys cloths is a joke, in fact all the clothing choices are a joke. The prices are just as bad. I don't care for Wal-Mart, but at least I can afford to buy what I need there and still have money left over to do something fun with my family.

I would like to see lower prices (like Wal-Mart and Target) the the PX/BX. I would shop at the PX more if they would have better quality and cheaper prices.

[kanzig]

I had my wallet stollen last year and had to get LifeLock against my Social Security number since whoever stole my wallet now has my SSN. I ended up keeping it since, lets face it, SSNs are everywhere in the military. It is costing me a mere 10/month to sleep well at night. Everywhere else on the planet will do refunds without even a receipt but the BX wants my first born child. Crazy.

[ADAMJROSENLUND]

I have to agree that AAFES is being totally ridiculous with this policy. I am stationed overseas and our PX has started posting signs saying that you will not be able to return anything without proving your SSN. This means either showing them your license with a SSN on it or your actual Social Security Card. Countless AFN commercials air to tell young soldiers who are uneducated about identity theft to keep things such as these cards locked in secure fire-proof places at all times. I can't even begin to tell how many cases I have handled where service members lost their wallets. If AAFES wants service members to carry their Social Security Card, than they are opeing up the door for scams and identity theft. If the majority of states and now the Department of Defense have decided that our SSN's are to important to disclose than what makes AAFES think they deserve to have it. Afterall, in order to access the installation you have to have a DOD ID card and than once you get to the register, the cashier is supposed to ask for that same picture ID card. It's not my fault their employees can't do their jobs properly.

[MRMIXITUP]

Does anyone even shop at AAFES anymore? Even with the tax savings, it doesn't come close to WalMart pricing.

[mfjdspence]

I have a suggestion...

Let's remind AAFES that they are part of the department of defense by removing their proffit generation capabilities and have them compete for construction funds like other orgs (not SVS types). Part of the shell game they play is with using their profits to expand, purchase, and expand their existing businesses, meanwhile simultaneaously looking for new ways to increase their proffit shares. I would also place US military lawyers in their legal department so they can no longer afford to hire the ones they do who are really good at "reading between the lines".

[mfjdspence]

An AAFES contractor is getting some less than sterling reviews for their services of TV, Internet, and Phone at Yokota Air Base. The base has been without the ability to receive incoming calls for over a week now and though there is a promised solution on the way, but I am waiting to see if they come through or not.

They were at first contracted to provide Integrated Voice Video and Data services. Since they took over in 2006, we have only Voice and Data integrated and Video being provided through the COAX system after their first attempt failed. Since 2006 customers have complained that there dropped calls and other problems with the phones, but the issues was largley ignored, at least that was the feeling of the community.

Check out this site: AlliedTelesisSucks.org (http://www.alliedtelesisrocks.org) to find out more and read the petition to AAFES asking them to enforce the contractural agreement that that are not currently pushing. There are some families with really hard stories signing the petition hoping to see some sort of resolution to the problem.

Oh...BTW, this was part of the AAFES Global IT extravaganza they are trying to sell to all the bases. They are trying to get rid of the competition first and then install their contractor. All that ends up happening is you pay more in the end for anything associated with AAFES...and for overseas folks, it isn't fun because they are pusing an artificial monopoly and making it impossible for other contractors to come in and compete.